parables/laravel-cuid2

Tests, a changelog, a clear MIT license, and a matching repository provide useful maintenance and adoption evidence. The workflow uses unpinned actions, and the small project has shown little recent activity.

Latest v1.0.3

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has four releases since March 2024, but none in the last 12 months and the latest was published in June 2025. This indicates a slowing maintenance cadence, partly offset by the package's stable 1.0 release.

Repo commit activity

There were no commits and no active maintainers in the last three months. This is a meaningful sign of currently low maintenance, though the package may be relatively mature and small.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap rather than a severe risk for this small library.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned. That weakens build reproducibility and supply-chain hygiene without indicating an active compromise.