rezozero/subscribeme

Repo commit activitycaution

No commits and no active maintainers were recorded in the last 3 months. The same-day repository push and recent registry release partly offset this, but recent development activity remains thin.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for a library handling external email-service integrations.

Workflow auditcaution

All 3 analyzed action references are unpinned, which weakens build reproducibility. The reported cache-poisoning finding has low confidence and is hygiene rather than a severe risk on its own.