Healthy and suitable to depend on. It has a long release history, a recent stable release, active commits from two contributors, and matching source with tests. The main caveats are concentrated maintenance and missing security-policy and workflow permission declarations.
88%
Total Score
75
50
94
75
Six runtime dependencies are a moderate dependency surface for a MIME parsing library; this is manageable but adds some transitive maintenance exposure.
The primary contributor made 10 of 11 recent commits, so maintenance is concentrated. A second contributor was active during the same period, partially reducing the single-maintainer risk.
The repository had one issue closed in the last month and no new pull requests, while 20 issues remain open. This is a minor maintenance concern, but not evidence of abandonment given the active commits and releases.
The repository uses Composer and Phing build tooling, but no security-scanning tools were detected. The build support is positive; the missing scanning coverage is a modest transparency gap.
No security policy was found in the repository, leaving vulnerability-reporting expectations less explicit for a parser library.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-31286 zbateson/mail-mime-parser is vulnerable to CRLF Injection in versions 0.0.1 - 3.0.5 and 4.0.0 - 4.0.1. | 0.0.1 - 3.0.54.0.0 - 4.0.1 | High |
AIKIDO-2026-323852 zbateson/mail-mime-parser is vulnerable to Uncontrolled Resource Consumption in versions 2.0.0 - 3.0.5 and 4.0.0 - 4.0.1. | 2.0.0 - 3.0.54.0.0 - 4.0.1 | High |
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1|^2|^3 | — | — |
php-di/php-di Version ^6.0|^7.0 | — | — |
guzzlehttp/psr7 Version ^2.5 || ^3.0 | — | — |
zbateson/mb-wrapper Version ^2.0 || ^3.0 | — | — |
zbateson/stream-decorators Version ^2.1 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.