insign/dumb-emails-validator

Release historydanger

Fifteen releases arrived during the first few days, but there have been no releases in about 20 months. That long silence is a substantial abandonment concern for a dependency.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the roughly 20-month release gap and indicating likely abandonment.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating uncertainty about whether the source repository belongs to this release.

Repo toolingcaution

The project uses Composer and Make, but has no security scanning tools. For a small validator this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.