pelmered/laravel-ulid

Lifecycle scriptscaution

A post-autoload-dump install script runs during Composer installation, adding executable installation behavior that deserves review. The signal provides no evidence that the script is unsafe, so this is a limited concern.

Project backingcaution

The registry namespace and repository owner are the same individual account, so ownership is consistent. There is no organization backing shown to compensate for the small maintainer base.

Release historycaution

The package has only 2 releases over 492 days, with 1 release in the last 12 months and a median interval of about 378 days. This indicates a slow maintenance cadence, although the latest release is recent.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers during the last 3 months. This is a meaningful maintenance warning, though it follows a release on June 17, 2026.

Security policycaution

The repository has no security policy. For a library that handles identifier generation and framework integration, this is a modest transparency gap.