devsrealm/csskiller-plugin-mail-contract

Maintainerscaution

Only one registry publishing maintainer is listed, which leaves limited visible publishing redundancy. This is an administrative risk rather than proof of weak maintenance, so it has a modest effect.

Release historycaution

The package is about 8 months old with three releases, all published within roughly one hour, and no later release activity was observed. This suggests a young project whose maintenance pattern is not yet established.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months. For a package that provides an email-consent workflow, this is a meaningful maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The absence of automated security checks is a hygiene gap for a package handling tokens and consent records.

Security policycaution

The repository has no security policy. That reduces transparency for reporting vulnerabilities in a package that handles email verification tokens, although it does not by itself show an active defect.