andreaskiessling/validemail

Release historycaution

Only two releases exist across about 13 months, with roughly seven and a half months between releases; this is thin evidence of sustained maintenance for a young package.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, leaving limited evidence of ongoing maintenance after the latest release.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected; this is a modest transparency and hygiene gap for a package with a build workflow.

Security policycaution

The repository has no security policy, reducing clarity about how vulnerability reports would be handled.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.