nalabdou/disposable-email-bundle

Release historycaution

The package has only one release, published about five months ago, so there is little evidence of sustained maintenance or release continuity.

Repo commit activitycaution

There were no commits and no active maintainers during the past three months, which is a meaningful maintenance concern for a project that has released only once.

Repo toolingcaution

The repository uses Make and Composer, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Workflow auditcaution

Both workflows were analyzed without high-confidence findings or untrusted execution paths, but all five action references are unpinned, leaving avoidable build reproducibility and update risk.