postal/postal
The package includes tests, a usable README, and release notes for this version. Stable versioning, organization backing, and a recent repository update help offset the limited release cadence and narrow recent contributor base.
68%
Total Score
67
100
92
75
Health Score Breakdown
The package has six releases since 2017 and no releases in the last 12 months, indicating a slow release cadence. The repository was updated recently, which partly offsets abandonment concerns.
One contributor made all recent commits, leaving the observed maintenance activity concentrated in a single person. Organization ownership provides some handoff capacity but does not show a second active contributor.
Only one commit was recorded in the last three months, so ongoing maintenance activity is limited despite the recent update.
The repository has no security policy, which makes vulnerability-reporting expectations less transparent for a library handling API credentials.
The sole workflow was fully analyzed with no audit findings or untrusted execution paths, but its one action reference is unpinned. That is a limited reproducibility concern rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Adam Cooke |
| Josh Grant |
| William Hall |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^6 || ^7 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.