spatie/mailcoach-mailer

Release historycaution

The package has existed since December 2022 and released version 1.3.1 in February 2026, but only one release appeared in the last 12 months with a median interval of about 221 days. This indicates a slow but not abandoned release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a June 2026 push and a February 2026 release show recent activity overall, the current pause modestly increases maintenance risk.

Security policycaution

The linked repository has no security policy file. For a package handling transactional mail integrations, this is a transparency gap, though it is not evidence of unsafe code.

Workflow auditcaution

All four workflows were analyzed with no audit findings and no untrusted checkout or script-injection paths. However, all nine action references are unpinned, and one workflow combines pull_request_target with top-level write permissions, so build reproducibility and token scope are weaker than ideal without a reported sink.