pecl/mailparse

Release historycaution

The package has three releases over 491 days, including two in the last 12 months, but the median interval is about 163 days. This indicates maintenance is present but not frequent.

Repo bus factorcaution

All five commits in the last three months came from one contributor, creating concentration risk. Organization ownership provides some capacity for handoff, but no second recently active contributor is shown.

Repo toolingcaution

The project uses make and Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear.

Workflow auditcaution

The only workflow was fully analyzed with no audit findings or untrusted-checkout and script-injection paths. However, all four action references are unpinned, which weakens build reproducibility.