octacrafts/oc-qr

Release historycaution

This package is 110 days old and has only one release, so its maintenance track record is still unproven; its recent creation partly explains the limited history.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers over the last three months, which leaves ongoing maintenance uncertain despite the project being relatively new.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful repository-hygiene gap.

Security policycaution

The repository has no published security policy, reducing transparency for reporting and handling vulnerabilities in a library that processes user data.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or audit failures. However, both action references are unpinned, which weakens build reproducibility.