Package Health/simplesoftwareio/simple-qrcode

simplesoftwareio/simple-qrcode

Clear documentation, tests, release notes, and an MIT license make integration straightforward. The matching, non-archived repository has security documentation, but its workflow uses an unpinned action and recent project activity is absent.

Latest 4.2.0

Packagist

54%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 26 releases, but none in the last 12 months; version 4.2.0 was published in February 2021. This long release gap raises maintenance risk, though the repository is not archived and was pushed in August 2024.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the stale registry release history, this suggests limited current maintenance.

Repo issue activity

There are 38 open issues and 20 open pull requests, but no issues or pull requests were closed in the last month. The unresolved queue is a modest maintenance concern.

Repo tooling

Composer is used for builds, but no security-scanning tooling is reported. This is a hygiene gap rather than evidence that the release is unsafe.

Workflow audit

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Its one action is unpinned, which leaves the build exposed to reference changes and warrants a minor hygiene concern.