schrammel-codes/magento2-epc-qr-code
The package is documented, tested, licensed, and installs without lifecycle scripts. Its workflow uses four unpinned actions and the project has no security policy, so pin workflow dependencies before relying on it broadly.
84%
Total Score
100
100
100
67
Health Score Breakdown
The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a transparency gap but not evidence of abandonment.
The single workflow was fully analyzed with no untrusted checkout, injection, or high-severity findings, but all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10876 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. schrammel-codes/magento2-epc-qr-code is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 1.0.0 - 1.1.2. | 1.0.0 - 1.1.2 | Medium |
Package versions
Maintainers
 Dipl.-Ing. Andreas Schrammel, BSc. |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 magento/framework Version ^103 | — | — |
smhg/sepa-qr-data Version ^2 | — | — |
apirone/php-qr-code Version ^1 | — | — |
magento/module-sales Version ^103 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.