drese/laravel-maileroo

Maintainerscaution

Only one account has registry publish access. That is a thin operational base for a package handling application email, although the linked repository is owned by the same individual, so this is not an ownership mismatch.

Release historycaution

There have been only two releases, both on October 7, 2025, with no release activity afterward despite the package being about 348 days old. This points to limited demonstrated maintenance capacity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, supporting the concern that maintenance has gone quiet. The repository is not archived, but that does not offset the absent recent activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance-hygiene gap, though it is not severe on its own.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings, no untrusted checkout or script-injection paths, and no top-level write permissions. Both action references are unpinned, which is a modest reproducibility and supply-chain hygiene concern.