zhuchunshu/hyperf-mail

Release historydanger

Only two releases were published, both in July 2021, with no releases in the last 12 months and an effectively five-year-old release history. That is strong evidence of abandonment for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.

Security policycaution

The repository has no security policy or security scanning tools. For an old, inactive package this reduces transparency and vulnerability-reporting support, though it is less important than the demonstrated maintenance gap.

Workflow auditcaution

The workflow audit completed fully and found no untrusted checkout or script-injection paths, but both referenced actions are unpinned and one uses an archived action. This is a hygiene and maintenance concern, not a standalone critical risk.