devrusspace/kennwort-email-sender

Release historydanger

The package has had no releases in about 3 years and 8 months, despite five releases clustered in January 2023. This is strong evidence of stagnation, though the package is not marked deprecated.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. That materially raises maintenance and abandonment risk.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of community use or review. Low popularity alone is not disqualifying for a small focused package.

Repo toolingcaution

Composer is used for the build, which fits the package, but no security scanning tools were detected. The absence of scanning weakens supply-chain maintenance evidence without proving a vulnerability.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap for a package that sends email and handles application credentials.