zooxsmart/request-id

Clear documentation, tests, licensing, and static analysis provide a solid baseline. The small project has no recent maintenance activity, and every workflow action reference is unpinned, so future updates and build integrity deserve caution.

Latest 1.0.2

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only 3 releases, all concentrated between October and November 2023, with no release in more than two years. This is a meaningful maintenance concern for a dependency, despite the stable 1.0.2 version.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with a project that has been inactive since December 2023. That raises abandonment risk, although the repository is still present and not archived.

Workflow audit

All 19 analyzed GitHub Actions references are unpinned, creating avoidable build-integrity risk. The audit found no untrusted checkouts, script injection, dangerous triggers, or high-severity findings, which keeps this as a hygiene concern rather than a severe workflow risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leandro Silva

Direct Dependencies

Dependency	Last Release	Score
ramsey/uuid Version ^4.1	—	—
psr/container Version ^1.0 \|\| ^2.0	—	—
psr/http-message Version ^1.0	—	—
psr/http-server-middleware Version ^1.0	—	—