Package Health

toastnz/sendgrid-mailer

The package is documented and straightforward, but its maintenance trail is too old for a current dependency. There is no security policy or recent repository activity, so pinning this version carries meaningful abandonment risk.

Latest 4.0.3PackagistPackagist

56%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the broader maintenance pause since April 2021.

Release historycaution

The latest release was on April 30, 2021, and there have been no releases in the last 12 months. Seven releases over the package's lifetime show an established history, but the long pause lowers confidence in continued maintenance.

Repo issue activitycaution

There is one open issue and one open pull request, but neither has seen new or merged activity in the last month. This provides little evidence of active maintenance.

Repo popularitycaution

The repository has zero stars and four forks. Popularity is only supporting evidence, but this low adoption signal offers little additional confidence for a dependency with no recent activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and hygiene gap, not evidence that the package is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leandro Palmieri

Direct Dependencies

DependencyLast ReleaseScore
silverstripe/cms
Version ^4
—
—
sendgrid/sendgrid
Version ^7.3
—
—
composer/installers
Version *
—
—
silverstripe/framework
Version ^4
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform