rareform/craft-mailer

Release historycaution

This is the first release and the package is only 0 days old, so there is no track record yet for release consistency or long-term maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a modest process gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were fully analyzed with no injection or high-severity findings, and permissions are scoped in at least one workflow. However, all five action references are unpinned, which weakens build reproducibility and supply-chain hygiene.