codedor/filament-mail-templates

Registry deprecationcaution

Packagist marks the package abandoned at package scope and names wotz/filament-mail-templates as the replacement. The linked repository remains active, so this is a significant adoption concern rather than proof that the release is unfit.

Security policycaution

The repository has no SECURITY.md or other security policy. This is a transparency gap, although Dependabot provides some compensating security tooling.

Workflow auditcaution

All five workflows were analyzed, but all 12 action references are unpinned and two workflows grant top-level write permissions. The audit also reports high-confidence bot-condition and template-injection findings; without an untrusted checkout or script-injection sink, these remain workflow-hygiene concerns rather than standalone severe risks.