A single maintainer and no security policy leave little visible support. The repository does not name this package, and its declared proprietary license conflicts with the GPL-3.0 license file.
42%
Total Score
50
38
50
The package has had no release in over three years, with only five releases overall and none in the last 12 months, which is a meaningful abandonment concern.
The manifest declares a proprietary license, while the artifact and repository contain a GPL-3.0 license file; this mismatch creates material licensing uncertainty.
Only one registry maintainer is listed, leaving limited visible publishing capacity and increasing continuity risk for an old package.
The repository name does not match the package name and its README does not mention the package, so the link does not clearly establish that this repository belongs to the release.
The repository has zero stars and forks and only one watcher, providing little supporting evidence of an active user or contributor community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nmirceac/mailgun Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.