horde/mail

Repo bus factorcaution

All 2 recent commits came from one contributor, which creates concentration risk. The organization-owned repository provides some capacity to hand maintenance to others, so this is a limited concern rather than a severe risk.

Security policycaution

The repository has no documented security policy. This weakens vulnerability-reporting transparency, but it is not evidence of abandonment by itself.

Workflow auditcaution

All three workflows were analyzed without detected audit findings or unsafe trigger sinks. However, 8 of 10 action references are unpinned, leaving avoidable build-reproducibility and action-update risk.