yarri/email-parser

Repo bus factorcaution

One contributor made all four recent commits, giving the project a top-contributor share of 100%. With user-owned project backing, this leaves maintenance dependent on a single person.

Repo commit activitycaution

The repository had four commits in the last three months, showing recent activity, but all were produced by one active maintainer. The activity is positive but narrow.

Security policycaution

No security policy is present. For an email-parsing library, the missing disclosure and response guidance is a real transparency gap, though it is not evidence of a security defect.

Version stabilitycaution

Version v0.2.4 is not a prerelease, but the package remains below 1.0, so API maturity and compatibility are less established than for a stable-major release.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, leaving dependency versions able to change unexpectedly.