spatie/laravel-mailcoach-postmark-setup

Release historycaution

The package has four releases, but none in the last three years and seven months, which raises maintenance and compatibility concerns despite earlier regular releases.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The only workflow uses a pull_request_target trigger without an untrusted checkout or script-injection sink, so that trigger is not dangerous here. However, its sole action reference is unpinned, which is a modest supply-chain hygiene gap.