spiral/mailer

Repo bus factorcaution

All recent commits belong to one contributor with a 100% share. Organization backing partly reduces handoff risk, but the observed recent activity remains concentrated.

Repo commit activitycaution

Six commits occurred in the last three months, but all were made by one active maintainer, so activity is present while the contributor base is narrow.

Security policycaution

No repository security policy was found, reducing transparency for reporting vulnerabilities, although the project does use Psalm scanning.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, which weakens build reproducibility; the absence of top-level permissions is acceptable on its own.