getodden/mail

Release historycaution

The package has three releases, all published on the same day, so there is not yet enough history to demonstrate sustained maintenance or release reliability.

Repo commit activitycaution

No commits or active maintainers were observed in the last three months, but the package and repository are only one day old, making this primarily an evidence limitation rather than established abandonment.

Repo toolingcaution

Composer build tooling is present, but no repository security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, reducing transparency for reporting vulnerabilities in a package that handles email compilation and deliverability features.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no detected dangerous sinks or audit findings. However, all four action references are unpinned, weakening build reproducibility and update integrity.