horde/mail_autoconfig

Dependency profilecaution

Eight runtime dependencies, including several Horde components and a DNS library, create a meaningful dependency surface but are reasonable for a mail autoconfiguration library.

Repo bus factorcaution

All three recent commits came from one contributor, concentrating maintenance capacity and increasing continuity risk; organization ownership partly compensates.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected, leaving a security-hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

Both workflows were analyzed without high- or medium-severity findings, and permissions are not broadly writable. However, six of seven action references are unpinned, leaving avoidable workflow reproducibility risk.