endroid/qrcode

Registry deprecationdanger

Packagist marks the entire package as abandoned, which is a serious adoption concern even though the listed replacement is the same package.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, a meaningful maintenance concern despite the recent package release.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no trigger or audit findings, but all five referenced actions are unpinned, weakening build reproducibility and supply-chain hygiene.