Tests, a substantial README, and a clean MIT license improve its transparency. Its history is too short to establish staying power, and the lone maintainer plus unpinned CI actions leave meaningful follow-up risk.
68%
Total Score
75
100
83
50
This is the package's first release, published today, so there is no track record for judging long-term maintenance or release stability.
All eight recent commits came from one contributor, leaving maintenance dependent on a single person with no demonstrated handoff capacity.
The repository has no security policy, making the process for reporting and coordinating vulnerability fixes unclear for a mail-handling library.
The single workflow was fully analyzed with no dangerous findings, but both of its action references are unpinned, so builds are exposed to upstream action changes.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.