edamov/mailtrap-php-sdk

Release historydanger

This is the package's only release, published about three years ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with an abandoned or inactive project. The linked repository remains available, but that does not compensate for the lack of recent work.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, though it is secondary to the maintenance evidence.

Version stabilitycaution

The release is version 0.1.0 rather than a stable major version, so its API and long-term support are less mature. The absence of prerelease labeling does not offset the early version.

Workflow auditcaution

All eight analyzed action references are unpinned, and high-confidence findings report spoofable bot conditions and an unpinned container image. The pull_request_target workflow has no untrusted checkout or script-injection finding, limiting the severity.