spatie/mjml-sidecar

Release historycaution

The package has five releases over about three years, but none in the last 12 months. That is a meaningful maintenance concern, though the latest release is recent enough to avoid an abandonment conclusion.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months. This weakens evidence of ongoing maintenance, although the repository is not archived and has a recent release.

Security policycaution

No security policy is present in the repository. That is a transparency and reporting gap, but it is not enough on its own to make the package unfit.

Workflow auditcaution

All five workflows were analyzed with no audit findings and no untrusted checkout or script-injection sinks. However, all 12 action references are unpinned, and three workflows grant top-level write permissions, creating avoidable workflow hygiene risk.