Framework-agnostic core of a Resend-powered shared inbox: webhook parsing, conversation threading, reply headers and auto-reply detection.
62%
Total Score
caution
A brand-new pre-1.0 package has good repository hygiene but no demonstrated maintenance history yet.
Only one registry account, jessecruz, has publish access. That is a limited publishing base, although the linked repository is also owned by the same individual and the package is newly created.
The package is 0 days old with only 2 releases, both published within roughly 4 hours. This shows active initial publishing but provides no long-term maintenance record.
There were 0 commits and 0 active maintainers in the last 3 months, but the repository and package were created less than a day ago. The result is inconclusive for abandonment while still leaving maintenance capacity unproven.
Composer build tooling is present, but no security scanning tools were detected. That is a modest hygiene gap rather than evidence of unsafe code.
v0.1.1 is not a stable major release, so its API and behavior may still change substantially even though it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/mime Version ^6.4||^7.0||^8.0 | — | — |
league/commonmark Version ^2.4 | — | — |
resend/resend-php Version ^1.3 | — | — |
egulias/email-validator Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.