msp/module-relinker-qr

Release historydanger

The package has had no release in over five years, despite five releases since 2018. That long gap is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository shows zero commits and zero active maintainers in the last three months, consistent with the release history and indicating no current maintenance capacity.

Package scaffoldingcaution

The release includes a GitHub release note, but its README is only 14 characters and the package has no tests or changelog. The release note partly improves traceability, but consumer documentation remains very thin.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating some uncertainty that the linked repository is the package's intended source.

Repo toolingcaution

Composer is used for the build, which is appropriate for this PHP package, but no security scanning tooling is configured. This is a modest transparency and maintenance gap.