mapo-89/laravel-qr-decoder

Release historycaution

The package is only 241 days old and all three releases arrived within roughly one hour, so its long-term maintenance pattern is not yet established.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, despite the package being less than a year old; this is evidence of currently limited maintenance activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings or dangerous triggers, but both of its two action references are unpinned, weakening build reproducibility and supply-chain hygiene.