lfphp/wechatsdk
68%
Total Score
caution
Usable with caveats: recent releases and an active repository offset single-maintainer and security-documentation gaps.
Health Score Breakdown
Eight runtime dependencies, including several PHP extensions and a cryptography compatibility package, increase deployment and compatibility requirements compared with a lightweight library.
Only one registry account has publish access. The linked repository is user-owned rather than organization-owned, so there is no provided project-backing evidence to offset that concentration.
The repository owner is an individual user, so the single-maintainer and single-contributor risks are not compensated by organization backing.
One contributor made all three recent commits, leaving maintenance dependent on a single person; the user-owned project context provides no organizational handoff signal.
Three commits in the last 3 months show recent activity, but the volume is modest for a package with a broad SDK surface.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 sasumi |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 lfphp/func Version ^2.0 | — | — |
lfphp/logger Version ^2.0 | — | — |
phpseclib/mcrypt_compat Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 23 days ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.