sujanshresthanet/php-qrcode-generator

Release historydanger

The package has had four releases, but none in the last 12 months; its latest registry release was in June 2022, about 4 years ago. This strongly raises abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long period without releases and providing no evidence of current maintenance.

Licensecaution

The artifact declares LGPL-3.0 and includes a license file, but the detected license is GPL-3.0. The presence of licensing files is positive, while the mismatch creates a meaningful compatibility and transparency concern.

Maintainerscaution

Only one individual has registry publishing access. That is a thin maintainer base for continuity, though the linked repository is also owned by the same individual, so the result is caution rather than a severe risk by itself.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools are configured. The build setup is a positive sign, while the missing scanning coverage is a modest hygiene concern.