floms/openbarcode

The code is small and clearly licensed, with no install-time scripts. Its only release and last repository push were about 12 years ago, and the linked repository has no tests or security policy; pinning this dependency carries substantial abandonment risk.

Latest v0.1

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about 12 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk despite the package remaining available.

Package scaffolding

The package includes a README and the version has a GitHub release, which provide basic transparency. The repository has no tests or changelog, limiting evidence of ongoing quality practices, though missing tests and changelogs are common in published artifacts.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No newer maintenance activity compensates for this.

Repo package mention

The repository name does not match the package name and its README does not mention the package, leaving some uncertainty about whether it is the intended source. The repository link otherwise provides a concrete source location.

Repo tooling

Composer is used as a build tool, but no security scanning tools were detected. The missing scanner is a hygiene gap, not a severe risk on its own.