ojessecruz/laravel-resend-inbox

Maintainerscaution

One registry maintainer, Jesse Cruz, publishes the package. That is a thin individual maintainer base, though it is consistent with the matching user-owned repository and does not by itself indicate neglect.

Release historycaution

The package is brand new, with six releases published in less than one day. That shows active initial work but provides too little history to establish a dependable maintenance pattern.

Version stabilitycaution

Version v0.1.5 is not a stable-major release, so the public API may still change. It is not marked as a prerelease, which partially offsets that concern.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no untrusted checkouts, script injection, or other findings, but all four referenced actions are unpinned. That is a modest reproducibility and supply-chain hygiene weakness, not a severe risk.