duanlujian/wechat_framework_yii2
The stable version and matching repository make the package easy to identify. Its tiny README and absent security policy leave little consumer guidance, while the project provides limited evidence of ongoing care.
35%
Total Score
57
50
Health checks
Only two releases were published, with the latest in March 2017 and none in the last 12 months; this is strong evidence of abandonment risk for a dependency.
Neither a license declaration nor a license file was found, leaving the legal terms for reuse unclear.
The package includes a README, but it is only 24 characters long and provides almost no integration guidance. Missing tests and a changelog are normal for a published artifact and do not add concern here.
The repository has only 2 stars, 0 forks, and 1 watcher, providing little community evidence to offset the thin maintenance record.
Composer is used for builds, but no security-scanning tooling is present; this is a modest transparency and maintenance gap rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 duanlujian |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.