dophp/laravel-mail-builder

Release historycaution

The package is zero days old with only two releases, so there is not yet enough release history to demonstrate sustained maintenance. The second release includes documented licensing changes, which provides limited transparency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, although the project is newly published. This leaves maintenance continuity unproven rather than showing established abandonment.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations unspecified. This is a transparency gap for a package intended for application use.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no detected injection or high-severity findings. All four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.