egulias/email-validator

Usable with caveats: this is a mature, licensed library with a substantial repository, tests, security tooling, and a recent stable release. Maintenance activity has since gone quiet, and the repository lacks an explicit security policy and top-level workflow permissions.

Latest 4.0.4

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The project has released 66 versions since 2013, but it recorded no releases in the last 12 months after version 4.0.4 was published in March 2025. The long history is reassuring, while the recent release pause warrants caution.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. Although the March 2025 release and extensive history provide some compensation, the current maintenance pause raises abandonment risk.

Repo issue activity

There are 30 open issues and 7 open pull requests, but no new or closed issues or pull requests in the last month. This suggests limited current project activity.

Security policy

No security policy was found in the repository, leaving vulnerability-reporting and response expectations less transparent for users.

Token permissions

All three workflows lack top-level token permission declarations. No workflow requests top-level write access, which limits the concern, but explicit least-privilege settings would provide stronger assurance.