undkonsorten/html-mail-utility

Repo bus factorcaution

Only one contributor made all nine recent commits, leaving the project exposed if that contributor becomes unavailable; organizational ownership provides some handoff capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users lack documented guidance for reporting vulnerabilities or understanding the project's security process.

Workflow auditcaution

The single workflow was fully analyzed and has a high-confidence template-injection finding; both of its actions are also unpinned. No untrusted checkout or broad top-level write permission was found, limiting the severity.