ojessecruz/resend-inbox-bundle

Release historycaution

The package is only 0 days old, with four releases published within hours; this provides too little history to establish sustained maintenance.

Repo commit activitycaution

The repository has zero commits and zero active maintainers in the last three months. Because the project is newly published, this is evidence of limited demonstrated maintenance rather than abandonment by itself.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The security policy and workflow audit provide some transparency, but not automated security coverage.

Version stabilitycaution

v0.1.3 is not marked as a prerelease, but the 0.x version and extremely recent release history indicate an early-stage project.

Workflow auditcaution

Both workflows use read-only permissions and have no detected injection or high-severity findings, but all six action references are unpinned, leaving dependency versions mutable.