princejohnsantillan/id-base-converter

Release historycaution

The package has seven releases, but none in the last 12 months and its latest release was over two years ago. This is meaningful evidence of inactivity for a dependency consumers may need maintained over time.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a small library this is a hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy, which makes vulnerability-reporting expectations less transparent. This is a modest transparency concern for an otherwise small project.

Workflow auditcaution

All eight analyzed action references are unpinned, and two workflows grant top-level write permissions. The audit found no untrusted checkout, injection, or high-severity finding, so this is workflow hygiene risk rather than a severe issue.