cycle/entity-macros-uuid

The source project has had no commits or active maintainers in over two years, and its workflows use unpinned container images. The package is licensed, documented, tested in the repository, and not deprecated, which limits the concern.

Latest 1.2.0

Packagist

62%

Total Score

Maintainer Stability

Maturity

Health Score Breakdown

Release history

The package has had no release in over two years, with only three releases since December 2021 and no releases in the last 12 months. This suggests slowing maintenance, though the package is mature and stable.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This is a meaningful abandonment concern, but the repository is not archived and the package has a stable release.

Repo package mention

The linked repository name does not match the package name and its README does not mention this package, creating some uncertainty about package ownership. The repository is nevertheless under the matching Cycle organization and is clearly structured for the related UUID behavior project, which partly compensates.

Workflow audit

All 22 action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in the MSSQL workflow. No untrusted checkout or script-injection paths were found, so this is a workflow hygiene risk rather than a severe release risk by itself.