@lukeed/uuid

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable; this is a transparency gap rather than evidence of unsafe code.

Maintainerscaution

A single registry maintainer account publishes the package. The repository is user-owned rather than organization-owned, so this provides limited publishing redundancy.

Release historycaution

The package has only four releases and none in the last 12 months; the latest release was in March 2023, which lowers confidence in ongoing maintenance for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, materially lowering confidence that fixes will arrive promptly.

Repo issue activitycaution

There is one open issue and four open pull requests, but no issues or pull requests were opened or merged in the last month, offering little evidence of active maintenance.