valuetypes/uuid-contracts

Release historydanger

This package has only one release, published in January 2017, with no releases in the past 12 months. That long period without a new release is strong evidence of abandonment risk.

Repo commit activitydanger

The repository has recorded zero commits and zero active maintainers in the past three months, consistent with the release history showing no activity since January 2017.

Package scaffoldingcaution

The package includes a README and changelog, but the README explicitly lists better documentation and implementation as unfinished work. The absence of packaged tests is normal and is not treated as a gap.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence that the package is unsafe.

Repository archivedcaution

The linked repository is not archived, which is a compensating sign, but its last push was in January 2017 and does not offset the lack of subsequent activity.