cosmira/outlook-msg

This is a usable and actively maintained release with a clear MIT license, a stable 1.2.0 version, regular releases, recent repository activity, repository-backed tests and CI tooling, and no deprecation or archival status. The main concerns are that the project is young, all 32 recent commits came from one contributor, the repository has very little external adoption, no security scanning or security policy was found, and several workflows lack explicit top-level permissions, including one with write access. These issues warrant review and monitoring, but the available evidence does not indicate abandonment or an otherwise unfit dependency.

Latest 1.2.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made 100% of the 32 commits in the last three months, creating a genuine continuity and handoff risk. Organization ownership provides some backing, but no second active contributor is shown.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month; while this may reflect a stable project, it also means there is little observable community review or support activity.

Repo popularity

The repository has only 1 star, 0 forks, and 0 watchers. This is not evidence of abandonment by itself, but it provides little external validation or community support.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a security-process gap in the repository.

Security policy

No repository security policy was found, reducing transparency around vulnerability reporting and response expectations.