endroid/qrcode-bundle

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no distinct replacement identified. Package-level deprecation is a severe adoption risk and outweighs the otherwise healthy maintenance evidence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. This conflicts with the recent release and push evidence and raises a maintenance concern.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the repository may not clearly belong to this release.

Repo toolingcaution

The repository uses Composer but has no detected security-scanning tools. This is a transparency gap, though it is less serious than the package-level abandonment status.

Security policycaution

No repository security policy was found. That weakens vulnerability-reporting transparency, but does not alone determine whether the package is usable.