smartemailing/types

Repo bus factorcaution

All recent commits came from one contributor, which creates concentration risk; the organization-owned repository provides some ability to transfer maintenance, so this is a caution rather than a severe risk.

Repo commit activitycaution

Only one commit was recorded in the last three months and one maintainer was active, showing limited recent development activity despite the current release.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tool was detected, leaving security maintenance less transparent.

Security policycaution

No repository security policy was found, reducing transparency around vulnerability reporting and handling.

Token permissionscaution

The only workflow does not declare top-level token permissions. No write permissions were observed, but explicit least-privilege configuration would provide stronger assurance.