arkh-tech/arkh-unique-id

The package is small and easy to audit, with one runtime dependency, a clear README, and an organization-backed repository. Its license metadata conflicts with the MIT license file, while no commits were recorded in the last three months. Pin this version only if the licensing ambiguity is acceptable.

Latest 1.0.1

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

The manifest declares a proprietary license while the artifact and repository contain an MIT license file. That conflict creates real licensing ambiguity despite the presence of a license file.

Release history

The package is young, with two releases over about four months and the latest published roughly four months ago. This provides limited evidence of sustained maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. For a package released only about four months ago, this is a meaningful warning about ongoing maintenance.

Repo popularity

The repository has no stars, forks, or watchers. That offers no supporting evidence of community adoption, but popularity is only secondary and does not by itself make a small package unsafe to use.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security-scanning tooling was detected. The missing scan is a hygiene gap rather than evidence of unsafe code.