xp-framework/mail

Release historycaution

The project is mature, with 22 releases since 2015 and a release in the last year, but only one release in the last 12 months indicates a slower current cadence.

Repo bus factorcaution

All six recent commits came from one contributor, creating a meaningful continuity risk; organization ownership provides some capacity to hand maintenance off but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected, leaving security-quality checks less transparent.

Security policycaution

The repository has no security policy, which makes reporting and handling vulnerabilities less clear for a package that processes email and network interactions.

Workflow auditcaution

The only workflow was fully analyzed with no risky audit findings or untrusted checkouts, but all three action references are unpinned, reducing build reproducibility.