It includes a license, tests, and a matching repository, with no install-time scripts. Its dependency list is broad and includes testing libraries at runtime, which adds maintenance overhead.
55%
Total Score
50
50
83
75
The package declares 14 runtime dependencies, including PHPUnit and other testing-related packages, creating a comparatively broad maintenance surface and an unusual runtime profile.
The package has 49 releases, but none in the last 12 months; its latest release was about 18 months ago, indicating a meaningful maintenance pause.
The repository recorded no commits and no active maintainers in the last 3 months, supporting the concern that development has stalled.
The repository has no stars or forks and only one watcher. This offers little external validation, but popularity is supporting evidence rather than a standalone health verdict.
Composer build tooling is present, but no security scanning tools were detected; this is a modest repository hygiene gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
endroid/qr-code Version ^5.0.9 | — | — |
phpunit/phpunit Version ^10.0.0 | — | — |
zxing/qr-reader Version ^v1.2 | — | — |
smalot/pdfparser Version ^v2.11.0 | — | — |
guzzlehttp/guzzle Version ^7.9.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.