tobmoeller/laravel-mail-allowlist

Registry deprecationdanger

Packagist marks the entire package as abandoned and names tobmoeller/laravel-mail-middleware as its replacement. This directly indicates that new projects should not depend on this package.

Release historycaution

The package has had no releases in the last 12 months, despite being about two years old and having six releases overall. The absence of recent releases supports the abandonment concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This provides little evidence of ongoing maintenance for a package already marked abandoned.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the audit reports a high-confidence bot-conditions finding; three workflows also grant top-level write access. The pull_request_target workflow has no untrusted checkout or script-injection findings, limiting this to workflow hygiene rather than a severe risk.