gaoming13/wechat-php-sdk

Release historydanger

The package has 16 releases over about 11 years, but none in the last 12 months; the latest registry release was in June 2021. This long period without releases materially raises abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in June 2021. The inactive codebase is the main concern for relying on a package that integrates with an evolving external service.

Maintainerscaution

Only one registry publisher account is listed. With no organization backing shown and no recent commit activity, the project has limited visible continuity if that maintainer stops responding.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security scanning tools are present. That leaves dependency and repository-level security checks less visible.

Security policycaution

The repository has no security policy. This reduces transparency around vulnerability reporting and response, although it is a secondary concern compared with the maintenance gap.