undkonsorten/powermail-subscription

Release historycaution

This is the only release, published about 159 days ago, so there is little evidence of an established release track or continued maintenance.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, leaving maintenance continuity unproven after the initial release.

Repo toolingcaution

Composer is used for the build, but no security scanning tooling is reported, leaving an avoidable transparency gap for supply-chain maintenance.

Security policycaution

The linked repository has no security policy, so there is no documented route for reporting or handling vulnerabilities.

Workflow auditcaution

The single workflow uses both analyzed actions without pinning them to immutable references. The high-confidence template-injection finding is a hygiene concern here, but no untrusted checkout or script-injection trigger was reported.