james2001/zxing-bundle

Release historydanger

The package has had only one release, published in December 2014, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency released over 11 years ago.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release silence. The last push was in May 2016, leaving no recent maintenance evidence.

Maintainerscaution

Only one registry account has publishing access, so there is little visible publishing redundancy. The linked repository is user-owned rather than organization-backed, which makes this thin maintainer base more concerning.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no community signal to offset the lack of maintenance.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less significant than the prolonged inactivity.