hehongyuanlove/flarum-auth-wechat
The MIT license and installation README are present, and the package has no install-time scripts. Its single maintainer, absent recent commits, repository/package mismatch, and unpinned workflow actions leave maintenance and provenance concerns.
42%
Total Score
33
100
56
67
Health Score Breakdown
This is the only release, published about 3 years and 5 months ago, with no releases in the last 12 months. That strongly suggests the package is inactive.
The repository had zero commits and zero active maintainers in the last 3 months, indicating no recent maintenance activity.
The repository name does not match the package name and its README does not mention the package, raising concern that the linked source may not clearly belong to this release.
One registry maintainer is consistent with an individual-owned project, but it provides little redundancy if that maintainer stops supporting the package.
The repository is owned by an individual account rather than an organization, so there is no organizational backing shown to compensate for the thin maintainer base.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hehongyuanlove |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 flarum/core Version ^1.0.0 | — | — |
fof/components Version ^1.0.0 | — | — |
laravel/helpers Version ^v1.4.1 | — | — |
nomiscz/oauth2-wechat Version ^0.1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.