besmarteeinc/laravel-mailchimp-driver

Release historycaution

The package has only three releases and none in the last 12 months; its latest release was published in February 2025. This indicates slow maintenance for a dependency, though the repository was updated around the same time and the package may be intentionally small and stable.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. For a small package this may reflect stability, but it leaves current maintenance responsiveness uncertain.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The absence of scanning is a maintainability and transparency gap, though it is not by itself evidence that the package is unsafe.

Security policycaution

The repository has no security policy, so users have no documented reporting process for vulnerabilities. This is a genuine transparency gap for a package handling mail transport credentials.

Token permissionscaution

Two workflows omit top-level token permissions, and one workflow declares top-level write access. The workflows show no dangerous patterns, but tighter permission declarations would reduce maintenance and automation risk.