swiftmade/laravel-sendgrid-notification-channel

Release historycaution

The package has 15 releases over roughly six years, but only one in the last 12 months; the latest release is recent, so this indicates slowing activity rather than abandonment.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release and repository backing partly offset this, but the lack of current development activity remains a maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected; this is a modest transparency and assurance gap for a small package.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a minor transparency gap, not evidence of unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted-code sinks. However, both action references are unpinned, which leaves the build exposed to moving action versions.