callmez/yii2-wechat

Release historydanger

Only two releases exist, with the latest published in May 2015 and none in over 11 years. This strongly indicates abandonment risk despite the package remaining available on the registry.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.

Repo toolingcaution

Composer is used for the build, but no security scanning tool is configured. The missing scanning is a modest transparency and maintenance concern, not evidence that the release is malicious.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds operational risk to an old package with no visible maintenance.