QR code generator for Slovenian UPN payment order
65%
Total Score
caution
Usable with caveats: maintenance has paused since June 2025 and the build workflow uses unpinned images.
The package has five releases since July 2022, but it has had no release in the last 12 months and the latest release was about 15 months ago, indicating slowed maintenance.
There were no commits or active maintainers in the last three months, reinforcing the release-history evidence that maintenance has currently paused.
Composer build tooling is present, but no security-scanning tools were detected, leaving automated security oversight limited.
The repository has no security policy, so users lack a documented channel and process for reporting vulnerabilities.
All three workflows were analyzed without untrusted triggers or script injection, but all seven action references are unpinned and the audit found a high-confidence unpinned container image; one workflow also grants top-level write access.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
bacon/bacon-qr-code Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.