jwaterwater/wechat

Release historydanger

The package has 337 releases, but none in the last 12 months and its latest release was in November 2022, indicating prolonged release inactivity despite earlier maturity.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. These are not inherently unsafe, but they increase install-time execution surface for consumers.

Repo issue activitycaution

There were no new issues, closed issues, pull requests, or merged pull requests in the last month. This supports the broader picture of an inactive project, although the open pull request count is zero.

Repository archivedcaution

The repository is not archived, which is a meaningful counterweight to abandonment concerns, but it was last pushed in October 2022 and therefore shows no recent maintenance.

Workflow auditcaution

All three workflows were analyzed successfully and have no reported dangerous findings or broad top-level write permissions. However, all five action references are unpinned, leaving the build exposed to moving action contents.