pecl/uuid

Release historycaution

The package has only two releases and none in the last 12 months; the latest release was about 16 months ago. This indicates a meaningful maintenance concern, although the linked repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This weakens the evidence of ongoing maintenance, even though the repository was pushed more recently overall.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. For a native extension, the missing security tooling is a modest transparency and hygiene gap.

Security policycaution

No repository security policy was found. This limits disclosure transparency, though it is not by itself evidence that the release is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, both analyzed action references are unpinned, leaving a modest reproducibility and supply-chain hygiene gap.