spatie/mailcoach-sdk-php

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Recent releases and a recent repository push partly offset this, but the current development pause lowers confidence in active maintenance.

Security policycaution

The repository has no security policy, leaving reporting and response guidance undocumented. This is a transparency gap rather than evidence of unsafe code.

Workflow auditcaution

The audit analyzed all five workflows with no failed files or reported findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all 12 action references are unpinned and one workflow has top-level write permissions, creating a mild reproducibility and token-scope concern.