iiyii/yii2-wechat-sdk

A clear README, MIT license, and single Yii dependency make the package easy to inspect. Its lone 2015 release and no recent commits leave it effectively unmaintained.

Latest v0.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published over 11 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency that may need compatibility and security maintenance.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the last push occurring over 11 years ago. This materially increases abandonment risk.

Repo issue activity

There were no new or closed issues or pull requests in the last month. With no recent commits or releases, this supports the conclusion that the project is inactive rather than demonstrating healthy issue resolution.

Repo tooling

Composer build tooling is present, but no security scanning tools are reported. This is a minor transparency and hygiene gap, outweighed by the more significant inactivity evidence.

Security policy

The repository has no security policy. For a package handling WeChat API and payment functionality, this weakens vulnerability-reporting transparency, although it is secondary to the lack of maintenance.