Opens a dialog with a QR code which includes the preview URI.
42%
Total Score
75
100
78
67
The latest release was published about seven years ago, and there were no releases in the past 12 months. This is strong evidence of abandonment risk despite the package having three releases overall.
The package defines a post-autoload-dump lifecycle script. The signal does not show that it is unsafe, but install-time execution adds some supply-chain exposure.
There are no open issues or pull requests and no issue or pull-request activity in the past month. For a repository already without a release for about seven years, this reinforces maintenance uncertainty.
The repository has one star and no forks, indicating limited external adoption. Popularity is supporting evidence only, but it provides little evidence of active community maintenance.
Composer build tooling is present, but no security scanning tools were detected. That leaves a transparency and maintenance gap for dependency and code-risk monitoring.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^8.7 || ^9.0 | — | — |
endroid/qr-code Version ^3.2 | — | — |
typo3/cms-viewpage Version ^8.7 || ^9.0 | — | — |
roave/security-advisories Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.