utopia-php/smtp

Dangerous workflowscaution

The only workflow uses pull_request_target, which can expose privileged workflow execution to pull-request changes; no untrusted checkout or script-injection pattern was detected, limiting the concern to workflow design risk.

Release historycaution

This is a young package, released three times over 33 days with a median interval of about 17 days; that shows active early development but provides limited long-term maintenance evidence.

Repo popularitycaution

The repository currently has zero stars, forks, and watchers, so there is little external adoption evidence; this is tempered by the package being only 33 days old and popularity being supporting rather than decisive.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a transparency gap, although the repository still has tests and organization backing.

Security policycaution

The repository has no SECURITY.md or equivalent security policy, leaving vulnerability reporting and response expectations unclear.