Its seven runtime dependencies add upkeep surface. The repository could not be found, so maintenance and provenance cannot be verified.
8%
Total Score
50
17
Packagist marks the entire package as abandoned and names azurespring/wxpay as a replacement. This directly makes the assessed release unfit for a new dependency.
The package was first released about 8 years ago, but its latest release was also in 2018 and there have been no releases in the last 12 months. This indicates prolonged abandonment.
The package declares seven runtime dependencies, including Guzzle, PSR interfaces, and several PHP extensions. That creates meaningful upkeep and compatibility surface for an otherwise inactive package.
The latest version is still 0.1.1, so the package never reached a stable major release. That reinforces the maturity concern alongside its long release gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.