friendsofhyperf/notification-mail

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, despite recent registry releases, leaving current maintenance capacity uncertain.

Repo toolingcaution

Composer is used as the build tool, but no repository security-scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe risk.

Workflow auditcaution

Both analyzed workflows completed the audit without high- or medium-severity findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, both of the two action references are unpinned, weakening build reproducibility.