reshapify/sendseven
Documentation, tests, a changelog, and a security policy provide useful project context. The repository is not archived, uses Dependabot, and mentions the package, but there is not yet enough history to establish long-term reliability.
68%
Total Score
100
100
88
83
Health Score Breakdown
The package is only 0 days old, with three releases arriving within roughly 15 minutes. This shows active initial publishing but provides almost no evidence of sustained maintenance.
Version v0.1.2 is not a stable-major release, so compatibility may still change as the package matures. It is not marked as a prerelease, which partly offsets that concern.
All 13 analyzed action references are unpinned, weakening build reproducibility and action supply-chain protection. Three workflows grant top-level write permissions, a mild concern, but no untrusted checkout, script injection, or auditor findings were detected.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Richard Bowen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.1 | — | — |
psr/http-message Version ^2.0 | — | — |
php-http/discovery Version ^1.20 | — | — |
psr/http-client-implementation Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 hours ago
- Created
- 9 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.