frontend-services/craft-mailcraft

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, despite a recent package release. This is the strongest maintenance concern and may indicate work is currently paused or release-only.

Licensecaution

The manifest declares a proprietary license, and LICENSE.md exists in both the package and repository. The release is therefore licensed, though proprietary terms may restrict use compared with common open-source licenses.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. This makes vulnerability reporting and response expectations less clear for adopters.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, and it scopes permissions at job level. Its one action reference is unpinned, leaving a limited reproducibility and workflow supply-chain hygiene gap.