The package has a clear README, a matching source repository, and a stable release. Its single-release history, zero commits in the last three months, one maintainer, and lack of security tooling leave meaningful maintenance and oversight concerns.
58%
Total Score
25
50
81
75
This is the package's only release, published 501 days ago, with no releases in the last 12 months; that provides little evidence of ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of current maintenance alongside the package's single-release history.
The package has four runtime dependencies and no declared development dependencies; this is a modest runtime surface, though the absence of development dependencies gives limited evidence about its test setup.
Only one registry account has publish access. The repository is owned by a user account rather than an organization, so there is little observed publishing redundancy.
Composer is used as the build tool, but no security-scanning tools were detected, leaving a transparency and oversight gap for a package that handles email credentials and callbacks.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mautic/core-lib Version ^6.0 | — | — |
symfony/amazon-mailer Version ^6.0 | — | — |
teknasyon-teknoloji/aws-ses-notification Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.