axazara/mailbluster-laravel

Repo commit activitycaution

There were no commits from active maintainers in the last 3 months, which is a maintenance caution, although the package had a current release and recent repository activity elsewhere.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tool was detected. This is a modest transparency and assurance gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unspecified for a package that handles API credentials.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 4 action references are unpinned, creating a supply-chain hygiene weakness.