shabushabu/laravel-uid

Lifecycle scriptscaution

The package uses a post-autoload-dump Composer lifecycle script. This is a mild supply-chain consideration, but the signal does not show that the script is unsafe or unusually extensive.

Maintainerscaution

Only one account has registry publishing access. That is a limited publishing base, although registry access alone does not establish the repository's maintenance capacity.

Repo bus factorcaution

One contributor made all three commits in the last three months, creating a concentrated active contributor base. Organization ownership partly compensates because maintenance can potentially be handed off internally.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanner is a hygiene gap rather than evidence of abandonment.

Version stabilitycaution

Version v0.13.1 is not marked as a prerelease, but the package remains below 1.0. Consumers should allow for compatibility changes between releases.