ahmedsamy/codeception-smtp-mail

Release historydanger

The package has had no registry release since October 2017, despite being about 11 years old. This long release gap is a meaningful maintenance concern, although the repository was pushed in July 2024.

Project backingcaution

The repository is owned by the same individual represented by the registry namespace, rather than an organization. That gives clear ownership but provides no organizational maintenance capacity.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This weakens the reassurance from the July 2024 push and indicates limited current maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small package this is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and handling, though it is not by itself evidence that the package is unsafe.