nextbox/neos-qrcode

The repository is not archived or deprecated, and this release has notes and a clear license. Two workflows use archived actions, while security scanning and a security policy are absent.

Latest 1.1.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in over three years: version 1.1.0 was published on April 12, 2023, and there were zero releases in the last 12 months. This substantially raises abandonment risk despite the short initial release interval.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of current maintenance capacity.

Repo tooling

The project uses Composer, but no security scanning tools were detected. That modestly weakens assurance for a package with no recent maintenance activity.

Security policy

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities. This is a hygiene gap rather than evidence that the release is unsafe by itself.

Workflow audit

Both analyzed workflows use archived GitHub Actions, a high-confidence maintenance and build-hygiene concern. However, there are no untrusted checkouts or script-injection findings, and only two of six action references are unpinned.