denshade/qrimage

The package includes a clear README, changelog, and license file, with no install-time scripts. Its repository is not archived and has a small dependency footprint, but no security scanning reduces transparency.

Latest 1.0

Packagist

39%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published in August 2016, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency expected to receive maintenance.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the single 2016 release, this indicates effectively absent ongoing maintenance.

Project backing

The package and repository are owned by the same individual account rather than an organization. This is consistent ownership, but it provides no organizational backing to compensate for the absent recent activity.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide little evidence of an active user or contributor community.

Repo tooling

Composer build tooling is present, but no security scanning tools are detected. The missing scanning is a transparency and hygiene gap, though it is secondary to the much stronger abandonment evidence.