A private development and staging email inbox in the Statamic Control Panel.
65%
Total Score
caution
A first release with no established commit history and five unpinned workflow actions leaves maintenance and build-integrity risk.
This is the package's first release, published less than a day ago, so there is no established release cadence or track record yet.
No commits or active maintainers were recorded during the last three months, but the repository and release are newly created; this makes long-term maintenance unproven rather than demonstrating a collapse in an established project.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository hygiene gap.
The repository has no security policy, which reduces disclosure transparency for a package handling captured email content, although this is not evidence of a security defect.
The workflow was fully analyzed, uses read-only permissions, and has no reported dangerous findings, but all five action references are unpinned, so their resolved code can change over time.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^6.35.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.