As I was running composer to install a new library into our repo, it warned me that:
Package yzalis/identicon is abandoned, you should avoid using it. No replacement was suggested.
I'm not familiar on what packagist.org's process is to declare a package abandoned. I see that the last commit in their repo is from 2019 and there are a number of unanswered issues and pull requests.