jdavidbakr/mail-tracker

This is a mature, actively released package with a stable major version, a non-deprecated MIT license, substantial documentation, tests in both the artifact and repository, and a repository that is current, correctly associated with the package, and not archived. Recent activity is present, but maintenance is concentrated in one contributor, and the repository lacks security scanning, a security policy, and explicit workflow token permissions. These are meaningful transparency and resilience gaps, though they do not outweigh the package’s long release history, ongoing releases, solid scaffolding, and current repository activity; it appears reasonable to depend on with normal monitoring of updates.

Latest 8.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one account has registry publish access. This is not itself evidence of poor health, but it leaves publishing continuity dependent on a single registry maintainer.

Project backing

The repository is owned by an individual user rather than an organization, so the single-contributor and single-publisher concentration is not mitigated by visible organizational backing.

Repo bus factor

One contributor made all four commits in the last three months, giving the project a concentrated maintenance base and increasing continuity risk for a user-owned repository.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected; this is a transparency and assurance gap rather than evidence of abandonment.

Security policy

The repository has no security policy, leaving vulnerability-reporting and disclosure expectations undocumented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

J David Baker

Direct Dependencies

Dependency	Last Release	Score
aws/aws-sdk-php Version ^3.372	—	—
guzzlehttp/guzzle Version ^7.2\|^8.0	—	—
illuminate/support Version ^10.0\|^11.0\|^12.0\|^13.0	—	—
aws/aws-php-sns-message-validator Version ^1.8	—	—