The repository has tests, release notes, and organization backing. Maintenance has been quiet for 3 months, and workflow actions are not pinned, leaving avoidable reproducibility and update risks.
70%
Total Score
75
100
79
100
The package has existed for about 9 years with 16 releases, but only one release in the last 12 months; the latest release is recent, so this is a modest maintenance concern rather than abandonment evidence.
There were no commits and no active maintainers in the last 3 months, indicating currently quiet development and some abandonment risk despite the recent release.
The repository uses Composer and Make, but no security scanning tools were detected; this is a hygiene gap without evidence of an unsafe release process.
Version v0.9.0 is not a stable major release, but it is not a prerelease and recent releases contain documented changes and maintenance work.
All four workflows were analyzed with no reported audit findings, and none uses an untrusted trigger or untrusted checkout. However, all 8 of 8 action references are unpinned, weakening build reproducibility and action supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/mail Version ^4.0.2 | — | — |
nette/utils Version ^4.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.