dingo-d/php-mjml-renderer

Lifecycle scriptscaution

The package runs a post-autoload-dump install lifecycle script; its presence adds execution-time complexity, although the signal does not show harmful behavior.

Release historycaution

This package has existed for 317 days but has only one release, so there is no established release cadence to demonstrate ongoing maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance warning for a young package.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 16 action references are unpinned, weakening build reproducibility.