cable8mm/qr-images
The package includes tests, documentation, release notes, and a clear MIT license. Maintenance is active, but all recent commits come from one contributor and workflow actions are unpinned; no security scanning is configured.
78%
Total Score
67
100
94
75
Health Score Breakdown
The repository is owned by an individual user rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
All 20 recent commits came from one contributor, so maintenance depends heavily on a single person and has limited handoff resilience.
Composer and Box provide build tooling, but no security scanning tools are configured, leaving a preventive maintenance gap.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
All five workflows were analyzed without dangerous-trigger sinks or audit findings, and two use read-only permissions; however, all 12 action references are unpinned, weakening build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sam Lee |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 setasign/fpdf Version ^1.8 | — | — |
symfony/console Version ^6.0|^7.0 | — | — |
chillerlan/php-qrcode Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.