f9webltd/simple-qrcode

The package includes tests, a changelog, release notes, a matching MIT license, and a small runtime dependency set. Its low activity and limited security tooling warrant checking future maintenance before upgrading.

Latest 5.0.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is 521 days old but has only two releases, with one release in the last 12 months and a median interval of about 11 months, indicating a slow release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern for a package with only two releases.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policy

The repository has no security policy, reducing clarity about vulnerability reporting and response.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Its one action reference is unpinned, which is a minor supply-chain hygiene gap; the absence of a top-level permissions block is acceptable on its own.