Clear documentation, tests, and an MIT license make integration straightforward. The organization-backed repository matches the package, but its small public footprint offers little evidence of ongoing support.
38%
Total Score
50
75
75
The package has only two releases, both from August 2021, with no releases in the last 12 months. This strongly indicates a stalled release cycle despite the package remaining undeprecated.
The repository shows zero commits and zero active maintainers in the last three months, consistent with the last push occurring nearly five years ago. The repository is not archived, but there is no recent activity to offset the abandonment risk.
The repository has one star and no forks, showing a very small public user and contributor footprint. Popularity is supporting evidence only, but here it reinforces the maintenance uncertainty.
Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than a standalone reason to reject the package.
The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This adds concern for an email-handling library, although it is less significant than the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/composer Version ^2.0 | — | — |
pelago/emogrifier Version ^5.0 | — | — |
composer/installers Version ~1.0 | — | — |
html2text/html2text Version ^4.3 | — | — |
phpmailer/phpmailer Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.