plin-code/laravel-email-fixer

Release historycaution

This is a young package with one release, published about 177 days ago, so there is little release history to demonstrate sustained maintenance.

Repo bus factorcaution

All recent commits came from one contributor. Organization ownership provides some handoff potential, but no second active contributor is evidenced in this period.

Repo commit activitycaution

Only two commits from one active maintainer were recorded in the last three months, showing recent activity but limited maintenance capacity.

Security policycaution

The repository has no SECURITY.md policy, which is a transparency gap for reporting vulnerabilities, though it does not by itself indicate abandonment.

Workflow auditcaution

All 12 analyzed action references are unpinned, and three workflows grant top-level write permissions; the audit also found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection finding, limiting the immediate severity.