fastgoo/wechat-hook-phpsdk

Release historydanger

This package has had only one release, published more than eight years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating that current maintenance capacity is unclear.

Repo issue activitycaution

There has been no issue or pull-request activity in the last month, while two issues remain open. This adds some maintenance concern, though the small issue count limits its weight.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are present. The absence of scanning is a modest hygiene gap rather than a standalone supply-chain verdict.

Security policycaution

The repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a transparency and maintenance gap, although it is not evidence of malicious behavior.