superbig/craft-mjml

Release historycaution

The package has existed for nearly eight years with 14 releases, but only one release arrived in the last 12 months, indicating a slower maintenance pace.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. This is a meaningful maintenance concern, although the release history shows the project has not been abandoned outright.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities. This is a moderate hygiene gap rather than evidence of unsafe code by itself.

Workflow auditcaution

Both workflows were analyzed successfully with no reported security findings, and permissions are scoped or read-only where declared. However, both action references are unpinned, creating a modest reproducibility and workflow supply-chain hygiene gap.