itjackjw/hyperf-mail

Release historydanger

The package has had no release in more than two years and none in the last 12 months, which is a substantial maintenance concern despite six releases overall.

Repo commit activitydanger

There were no commits from any active maintainers in the last three months, consistent with a repository that has been inactive since late 2023.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was observed, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, reducing clarity about vulnerability reporting and maintenance response.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts or script injection, but both action references are unpinned and one references an archived action, creating release-workflow supply-chain hygiene concerns.