Only one release arrived in the last 12 months, and the repository recorded no commits in the last three months. The project has tests, release notes, a license, and security tooling, but workflow pinning and a low-confidence cache warning add maintenance hygiene concerns.
61%
Total Score
50
94
75
The package has eight releases over about 666 days, but only one in the last 12 months, indicating sparse recent maintenance despite the latest release being available.
The repository recorded zero commits and zero active maintainers in the last three months, which raises a meaningful risk of slowing maintenance.
All 21 analyzed action references are unpinned, and one workflow has an untrusted checkout. The two cache-poisoning findings have low confidence, so they are hygiene concerns rather than severe risks.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/mime Version ^5|^6|^7|^8 | — | — |
symfony/console Version ^5|^6|^7|^8 | — | — |
horstoeko/mimedb Version ^1 | — | — |
vlucas/phpdotenv Version ^5 | — | — |
webklex/php-imap Version ^4|^5|^6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.