chekun/weixin-biz

The MIT license, readable package contents, and included tests make the release straightforward to inspect and integrate. Its single maintainer and lack of security scanning leave limited ongoing support and review capacity.

Latest v1.1.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in 2017, with no releases in the last 12 months; the latest release is about nine years old. This is strong evidence of abandonment risk, although the stable version reduces pre-release uncertainty.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no recent maintenance.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher, providing little evidence of broad community use or backup support. Low popularity alone is not disqualifying, but it does not compensate for the lack of recent maintenance.

Repo tooling

Composer is used for the build, but no security scanning tools are present. The build tooling supports reproducibility, while the missing scanning reduces ongoing dependency and vulnerability oversight.

Security policy

The repository has no security policy, so there is no documented channel or process for handling vulnerabilities. This is a meaningful transparency gap for a library handling business messaging, though it is less severe than the maintenance evidence.