Testing and publishing composer packages
35%
Total Score
0
64
75
The package has had only three releases, all with the latest published on February 10, 2018, and none in the last 12 months. This is strong evidence of abandonment for a dependency released over eight years ago.
The repository had zero commits and zero active maintainers in the last three months, consistent with the stale release history. No provided signal shows current maintenance capacity.
The artifact includes a short README, while the absence of tests and a changelog is normal for a published package; the repository also has no tests or changelog. The GitHub release indicator is positive, but its release notes are absent and it does not offset the broader maintenance concerns.
The repository has only 1 star, 0 forks, and 0 watchers. Popularity is supporting evidence rather than decisive proof, but these numbers provide little evidence of community support for an already inactive package.
The repository is not formally archived, but it was last pushed on February 11, 2018. The unarchived status does not compensate for the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
overtrue/wechat Version 3.2.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.