elevenyoon/easywechat

Release historycaution

The package published 398 releases in one day, with a median interval of 0 days. This unusual burst provides weaker evidence of sustained release discipline than a naturally distributed history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. That is a meaningful maintenance concern, especially alongside the concentrated release history.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This offers no supporting adoption evidence, although popularity is only secondary evidence and does not determine health.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The repository's SECURITY.md provides some process transparency, but does not replace automated scanning.

Workflow auditcaution

All 6 analyzed action references are unpinned, which weakens build reproducibility. The only audit finding is low-confidence cache-poisoning hygiene, with no untrusted checkout or script-injection path, so it is not a severe workflow risk.