zareshahi/sms
The package includes clear documentation, repository tests, a changelog, licensing, and security tooling. Its workflows use unpinned images and actions, adding maintenance risk despite the otherwise solid project structure.
42%
Total Score
33
100
88
83
Health Score Breakdown
The latest release was on February 24, 2022, with no releases in the last 12 months; this is strong evidence that maintenance has stopped.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing about four years without updates.
The repository is owned by an individual rather than an organization, so the small registry maintainer list offers limited evidence of ongoing project backing.
There was no issue or pull request activity in the last month and no merged pull requests, providing no evidence of ongoing maintenance.
All eight action references are unpinned, and a high-confidence audit found an unpinned container image; this weakens build reproducibility and supply-chain hygiene, though no untrusted checkout or injection trigger was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ali zareshahi |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^7.0|^8.0|^9.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^7.0|^8.0|^9.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.