laminasmarchey/laminas-mail

Registry deprecationdanger

Packagist marks the entire package as abandoned and recommends symfony/mailer as a replacement. Package-wide deprecation is a severe dependency risk, not merely a release-level warning.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the past three months. This provides strong evidence that fixes and compatibility updates are unlikely.

Release historycaution

All four releases occurred within the last 12 months, with a median interval of about 8 minutes, indicating a brief burst rather than an established maintenance cadence.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, although it is secondary to the package-wide deprecation.

Workflow auditcaution

All three analyzed workflows use unpinned action references, reducing build reproducibility and increasing exposure to action changes. No untrusted checkout, script injection, or high-severity audit finding was reported.