devxisas/qr-studio

Release historycaution

This package has only one release, published 187 days ago, so its long-term maintenance pattern is not yet established.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the past three months, which leaves current maintenance capacity unproven despite the recent initial release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful development safeguard unconfirmed.

Workflow auditcaution

All 6 analyzed action references are unpinned, creating avoidable build reproducibility and action-supply-chain exposure. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings, which limits this to a hygiene concern.