lendable/message
Recent release activity, repository tests, release notes, and a security policy support continued maintenance. One active contributor limits resilience, although organization backing reduces handoff risk.
70%
Total Score
83
100
94
100
Health Score Breakdown
Nine releases over about two years and a latest release in June 2026 show an established project, though only one release landed in the last 12 months.
All four recent commits came from one contributor, creating a meaningful continuity risk; organization ownership provides some ability to hand off maintenance but does not remove the concentration.
All three workflows were analyzed with no untrusted checkout or script-injection findings and all six action references pinned, but the release workflow has a high-confidence finding that its app token inherits blanket installation permissions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Lendable Ltd |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version ^4.7 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.