siro_yeah/qrcode_reader

Release historydanger

The package has had only two releases, both in September 2018, and none in the last 12 months. Nearly eight years without a release is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since 2018.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention this package. That weakens confidence that the source repository clearly belongs to the published package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest process gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. This reduces transparency for reporting vulnerabilities, although the small and inactive project may limit the practical effect.