eduardokum/laravel-mail-auto-embed

Maintainerscaution

Only one registry account has publish access. Because the repository is user-owned rather than organization-backed, this leaves limited visible publishing redundancy.

Project backingcaution

The package and repository share the same individual owner, providing clear ownership but no organizational backing or redundancy.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The recent release partly offsets this, but the short-term pause lowers maintenance confidence.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent for a library integrated into email systems.

Workflow auditcaution

Both workflows were analyzed successfully with no high- or medium-severity findings and no dangerous triggers or untrusted checkouts. However, all seven action references are unpinned, creating avoidable workflow supply-chain drift.