The MIT license, matching repository, clear README, and Composer tooling provide a transparent starting point. Maintenance history is too short to establish reliability, and the project has one registry maintainer plus no security policy.
68%
Total Score
50
100
94
75
One registry maintainer creates a thin publishing base and leaves the package dependent on a single person, with no organizational backing indicated.
The repository owner is an individual account, so the single-maintainer concern is not compensated by organizational backing.
This is the only release and the package is 0 days old, so there is no track record of maintenance or release stability yet.
The repository has no security policy, leaving vulnerability reporting and response expectations unspecified for a package handling mail content and API credentials.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/commonmark Version ^2.2 | — | — |
roundcube/plugin-installer Version >=0.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.