freax/mandrill-zend2

Release historydanger

The latest release was published nearly 11 years ago, with no releases in the last 12 months and only two releases overall. This is strong evidence of abandonment risk for a library dependency.

Repo popularitycaution

The repository has zero stars, one fork, and one watcher, indicating a very small user and contributor footprint. Popularity is supporting evidence only, but it offers little compensating evidence for the long inactivity.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tools are present. The missing scanning is a minor hygiene concern rather than a standalone severe risk.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency weakness, especially for an old API client.