Skip to content

Security: domainvalidity/php-disposable-email-validator

Security

SECURITY.md

Security Policy

PLEASE DON'T DISCLOSE SECURITY-RELATED ISSUES PUBLICLY, SEE BELOW.

Supported Versions

Version Supported
1.x

Scope notes

This package classifies email domains against lists you supply. It performs no DNS resolution, no SMTP verification and no network access of any kind, so an "acceptable" verdict is not proof that a mailbox exists or is trustworthy.

Keep the lists fresh: stale data causes both false negatives (new disposable providers unrecognized) and false positives (retired entries still blocking real users).

Reporting a Vulnerability

If you discover a security vulnerability within this package, please send an email to Alejandro Morelos at info@domainvalidity.dev. All security vulnerabilities will be promptly addressed.

There aren't any published security advisories