adrashyawarrior/laravel-multi-mailer

Release historydanger

There has been only one release, published about 3 years and 7 months ago, with no releases in the last 12 months. This is strong evidence of an unmaintained package.

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script, which expands what happens during Composer installation and warrants extra review for a package with no recent maintenance evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, matching the long release gap and leaving little evidence of ongoing maintenance.

Workflow auditcaution

All 9 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a meaningful hygiene concern rather than a standalone critical risk.