Package Health

2amigos/yii2-qrcode-helper

The source repository is active and well documented, with a clear license and release notes. However, the package is maintained by one recent contributor, lacks a security policy, and should be replaced by the listed successor.

Latest 4.0.0PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package abandoned and names 2amigos/qrcode-library as its replacement. This is a direct warning against starting a new dependency on this package.

Repo bus factorcaution

All 3 recent commits came from one contributor, giving the repository a concentrated recent bus factor. Organization backing provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

The repository had 3 commits in the last 3 months, so activity has not vanished. The modest volume still indicates limited recent maintenance capacity.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package name, creating uncertainty about whether it is the exact package source rather than a related or replacement project. The shared organization and QR-code library context reduce, but do not remove, that concern.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the release is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

2amigOS! Consulting Group

Direct Dependencies

DependencyLast ReleaseScore
bacon/bacon-qr-code
Version ^3.0
—
—
khanamiryan/qrcode-detector-decoder
Version ^2.0
—
—

Weekly Downloads

Info

Last Published
3 months ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform