vecode/caldera-mailer

Maintainerscaution

The registry lists one publisher account, which is a thin publishing base. However, the repository is owned by an organization, so the registry count alone does not establish weak project backing.

Release historycaution

Only three releases have been published since January 2023, with no releases in the last 12 months and the latest released in May 2025. This indicates a slow and currently inactive release cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this is evidence that maintenance has currently stopped.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and handling, although it is not by itself evidence of a vulnerability.