azhida/laravel-work_wechat_message

Release historydanger

The package has had no release in nearly five years: six releases were published overall, but none appeared in the last 12 months. This is strong evidence of abandonment risk despite the short early release intervals.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving maintenance capacity unproven.

Repo popularitycaution

The repository has only 2 stars, 1 fork, and 1 watcher. Low popularity is supporting evidence rather than decisive on its own, but it provides little compensating community signal for the dormant project.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing scanning reduces supply-chain maintenance transparency, although it does not by itself show a defect in the release.

Security policycaution

The repository has no security policy, which weakens the process for reporting and handling issues in a package that processes workplace messages. This is a transparency gap, but not severe on its own.