kharisma-wardhana/php_qr_decoder

Maintainerscaution

Only one registry publishing maintainer is listed, leaving a thin visible publishing base. This is somewhat offset by the matching user-owned repository, but still increases continuity risk.

Release historycaution

The package has had no releases in nearly five years, despite seven releases overall. Its earlier release interval was reasonably active, but the long pause materially raises abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing prolonged inactivity. The repository is not archived, which prevents this from being a severe finding.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broad maintenance or review community.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning reduces assurance for a library that processes image input, although it is not by itself a release blocker.