gryfoss/twig-smart-mailer

Release historycaution

This is the package's only release, published 400 days ago, with no releases in the last 12 months. That limited history and long silence raise maintenance risk, though the project is still relatively young.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months. With only one release, this provides little evidence of ongoing maintenance.

Security policycaution

The repository has no security policy or documented reporting path. This is a transparency gap for a mail-sending library, although it does not by itself show an active security problem.

Workflow auditcaution

All 8 action references are unpinned, and the workflow uses a floating container image tagged latest; the high-confidence unpinned-image finding weakens build reproducibility. The audit was complete and found no untrusted checkout or script injection.