Tiny QR code encoder
63%
Total Score
caution
Usable with caveats: repository activity stopped after the initial release burst, leaving maintenance uncertain.
The repository is owned by an individual rather than an organization, so the single registry maintainer provides limited visible redundancy. This is consistent with the small project but increases bus-factor concern when combined with inactive commits.
Four releases were published within the last 12 months, but all occurred in a short initial burst and the latest release was about 235 days before collection. This suggests limited ongoing release activity.
The repository had zero commits and zero active maintainers in the preceding three months. For a package only a few months old, this makes continued maintenance uncertain.
The linked repository is not archived, although its last push was about 235 days before collection. The non-archived state avoids a severe abandonment signal, while the stale push date is reflected in the maintenance assessment.
No repository security policy is present. This is a transparency gap, though it is less significant for a small library with no runtime dependencies.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.