All your mailer are belong to us
42%
Total Score
25
50
67
75
The latest release was about three years ago, with no releases in the last 12 months and only two releases overall. This indicates a largely inactive package rather than an actively maintained dependency.
The repository had zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. No provided activity signal compensates for this inactivity.
Nine runtime mailer dependencies create a broad dependency surface for a small package. This is consistent with an aggregator package, so it is a moderate concern rather than a severe supply-chain risk.
Only one registry account has publish access, leaving little visible publishing redundancy. The linked repository is user-owned rather than organization-backed, so no organizational capacity is shown to offset that thin base.
The published artifact contains only .gitignore and composer.json, and the repository has just three files. This unusually sparse structure provides little implementation or documentation context for consumers.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/amazon-mailer Version ^5.4 || ^6.0 || ^7.0 | — | — |
symfony/google-mailer Version ^5.4 || ^6.0 || ^7.0 | — | — |
symfony/mailgun-mailer Version ^5.4 || ^6.0 || ^7.0 | — | — |
symfony/mailjet-mailer Version ^5.4 || ^6.0 || ^7.0 | — | — |
symfony/postmark-mailer Version ^5.4 || ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.