remind/brevo

Repo bus factorcaution

One contributor made all two commits in the last three months, leaving maintenance highly concentrated. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded two commits in the last three months, showing recent activity but at a low level for an actively evolving integration.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a maintenance and assurance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, reducing transparency about how users should report vulnerabilities and receive fixes.

Workflow auditcaution

Both workflows were analyzed successfully with no detected injection or credential findings, but all six action references are unpinned. This creates avoidable workflow supply-chain drift.