maize-tech/laravel-mjml

Release historycaution

The package is only 94 days old with two releases, both published within the same day, so its long-term maintenance pattern is not yet established. Recent repository activity partly offsets that uncertainty.

Repo bus factorcaution

One contributor made all five recent commits. Organization ownership provides some handoff capacity, but no second recently active contributor is visible, leaving maintenance continuity concentrated.

Workflow auditcaution

All five workflows were analyzed, but all 12 action references are unpinned and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. The pull-request trigger has no untrusted checkout or script-injection sink, limiting the severity, but workflow hygiene still warrants caution.