cliffparnitzky/checked-email

Release historycaution

The package has existed since August 2014 and released once in the last 12 months, but its 12-release history reflects a relatively infrequent cadence. This is a modest maintenance concern rather than evidence of abandonment.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a maintained extension, that lowers confidence in ongoing fixes and support.

Repo toolingcaution

Composer is used for the build, but no security scanning tool is configured. The missing scanner is a hygiene gap, not evidence that the package is unsafe by itself.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented for consumers.

Workflow auditcaution

All four workflows were analyzed successfully with no dangerous audit findings or untrusted sinks, but all eight action references are unpinned. This leaves workflow dependencies exposed to tag or branch changes and is a real supply-chain hygiene concern.