mr4-lc/code-scanner

The MIT license, readable README, and minimal runtime dependency make the package straightforward to inspect and install. Its limited security oversight and sparse project activity leave substantial uncertainty about long-term maintenance.

Latest 0.0.1

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published in November 2023, with no releases in the last 12 months. That long gap is a meaningful abandonment concern for a package used in an application.

Repo commit activity

There were no commits and no active maintainers in the three months measured. Combined with the single registry release, this provides weak evidence of ongoing maintenance.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap rather than evidence of an unsafe release by itself.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This matters for an extension that processes camera and barcode data, though it is not severe on its own.

Version stability

Version 0.0.1 is not a stable major release, which suggests an immature API and greater compatibility risk. The package is not marked as a prerelease, but that does not offset the very early version.