aitoc/smtp

Licensecaution

The manifest declares a proprietary license, with no detected license text or license file in the package or repository. That creates a meaningful adoption and transparency concern for an open-source dependency.

Release historycaution

The package has four releases over roughly four years, with one release in the last 12 months and a median interval of about 315 days. The latest release is recent enough to show activity, but the cadence provides limited evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months. Although the recent release shows some activity, the current lack of commit activity weakens confidence in ongoing support.

Repo toolingcaution

The repository uses Composer for builds, but no security-scanning tools were detected. The build setup is appropriate, while the missing scanning is a modest transparency and hygiene concern.

Security policycaution

The repository has no security policy. This reduces clarity about vulnerability reporting and response, though it is not by itself evidence of abandonment.