Package Health/frictionlessdigital/uuidable

frictionlessdigital/uuidable

This is a usable, licensed, non-deprecated package with a clear matching repository, documented source tests, a small runtime dependency footprint, and no install-time scripts or dangerous workflows. However, maintenance evidence is mixed: the project has existed since 2021 with only 10 releases and one release in the last 12 months, while the repository shows zero commits and zero active maintainers in the last 3 months. The organization-backed repository and recent push provide some support, but the absence of security scanning and a security policy leaves transparency and maintenance concerns. It is reasonable to adopt with routine dependency monitoring, but it is not strongly evidenced as actively maintained.

Latest 12.1.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is mature at about 5 years old, but only 10 releases and one release in the last 12 months indicate a relatively slow release cadence.

Repo commit activity

The repository records zero commits and zero active maintainers over the last 3 months. Although a recent push and current release provide some compensating evidence, the lack of observed ongoing commit activity is a meaningful maintenance concern.

Repo popularity

The repository has zero stars and forks and only two watchers, indicating very limited external adoption; this is supporting caution rather than a verdict by itself.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured, leaving a gap in repository security hygiene.

Security policy

No security policy was found, reducing transparency around vulnerability reporting and response.