digital-marketing-framework/distributor-mail

Repo bus factorcaution

All recent commits come from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer, which indicates a thin recent maintenance base.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions, but all four action references are unpinned and the high-confidence audit finding identifies an unpinned container image.