mblsolutions/paypoint-sendgrid-notification

Release historycaution

The package has only three releases, all within about eight days, and none in the last 12 months despite being about 386 days old. That short history and prolonged release gap raise maintenance risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly one-year release gap. This is a meaningful abandonment concern for a young package.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning reduces maintenance assurance alongside the repository's limited recent activity.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, though it is not by itself evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings or untrusted checkouts, but both referenced actions are unpinned. That weakens build reproducibility and supply-chain hygiene.