lekoala/silverstripe-mandrill

Release historycaution

The package has 17 releases over nearly 12 years, but none in the last 12 months; the latest release was nearly two years ago. This indicates a meaningful maintenance slowdown, although the release history is established.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with nearly two years since the latest release. This is a real abandonment risk despite the repository remaining available.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. That leaves a gap in ongoing security hygiene for a package with runtime dependencies.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings, but its one action use is unpinned. The missing top-level permissions block is acceptable on its own, while the unpinned reference is a minor reproducibility and supply-chain hygiene gap.