kodus/uuid-v4

Release historycaution

The package has existed since 2017 but has only four releases, with no release in roughly 20 months and a median interval of about 29 months. This indicates slow maintenance, though the latest release is still recent enough to avoid an abandonment verdict.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release interval. This lowers confidence in ongoing maintenance but is not as severe as an archived repository.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was detected. The missing scanning is a modest transparency and maintenance gap for a dependency package.

Security policycaution

The repository has no security policy. For a small UUID utility this is a limited concern, but it reduces clarity about vulnerability reporting and handling.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, or reported findings. However, both analyzed action references are unpinned, which leaves the build exposed to moving action versions.