leadm/leadmail

Maintainerscaution

The registry has one publishing maintainer, Lead Magnet Oy. This is a modest publishing-base concern, although the repository and README provide evidence of an identifiable project behind the release.

Project backingcaution

The repository is owned by a user account rather than an organization, so the concentrated contributor activity is not compensated by visible organization-level maintenance backing.

Repo bus factorcaution

All 3 recent commits came from one contributor, giving the project a high bus-factor risk and leaving continuity dependent on a single active maintainer.

Repo popularitycaution

The repository has 0 stars, forks, and watchers, so there is no external adoption evidence to supplement the maintenance assessment; this is a caution for maturity, not proof of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. The missing scanning is a genuine security-process gap, though it does not by itself establish package unfitness.