php-bread-and-butter/qrcodegenerator

Release historydanger

The package has only two releases, both from 2019, and none in roughly six years; this is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.

Licensecaution

The manifest declares MIT while the artifact license file is detected as LGPL-3.0. A license file exists, but the mismatch creates avoidable legal uncertainty.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the source-package relationship is not transparent.

Repo toolingcaution

Composer is used for the build, which supports reproducible project structure, but no security-scanning tooling is present.