kiwfy/ulid-php

Registry deprecationdanger

Packagist marks the entire package as abandoned and names not-empty/ulid-php-lib as its replacement, making this release a poor dependency choice despite the active source repository.

Lifecycle scriptscaution

A post-install-cmd script runs during installation, adding supply-chain exposure that should be inspected before adoption because no further script behavior is provided here.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a current maintenance gap even though a recent release exists.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The workflow audit completed cleanly with no injection or high-severity findings, but all three action references are unpinned, weakening build reproducibility.