friendsofhyperf/mail

Repo bus factorcaution

All recent commits came from one contributor, so maintenance could be disrupted if that person becomes unavailable; organization backing provides only partial compensation because no second recent contributor is shown.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, indicating limited recent source activity despite the stronger registry release cadence.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected. The separate security policy helps transparency but does not replace automated scanning.

Workflow auditcaution

The audit completed cleanly with no detected injection or high-severity findings, but both analyzed action references are unpinned, leaving workflow dependencies exposed to changing upstream code.