rikudou/qr-payment-bundle

Release historydanger

The last release was in March 2019, with no releases in the past 12 months despite the package being over seven years old. This is strong evidence of abandonment risk.

Repo commit activitydanger

There were no commits and no active maintainers in the past three months, consistent with the release history showing no activity since March 2019. This materially increases abandonment risk.

Dependency profilecaution

Eight runtime dependencies, including several payment libraries and Symfony components, create meaningful dependency surface for a small bundle. The signal does not show that any dependency is unsafe, so this is a limited concern.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no visible organizational backing to compensate for the single-project maintenance footprint.

Repo popularitycaution

The repository has only 3 stars and 6 forks, indicating a small user and contributor footprint. Popularity is supporting evidence rather than a verdict, but it offers little compensation for the inactivity.