liasica/yii2-wechat-sdk

The MIT license, matching repository, and clear README provide basic transparency. However, the package has seen no release or commit activity for about eight years, with no security scanning, making future compatibility and maintenance a serious concern.

Latest 0.3.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published about eight years ago, and there have been no releases in the last 12 months. This long gap is strong evidence of abandonment risk despite nine historical releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating no observed ongoing maintenance.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no additional community or maintenance confidence.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a secondary transparency and maintenance gap rather than evidence that the release is unsafe.

Security policy

The linked repository has no security policy. For a package that handles a third-party service API, this reduces transparency around vulnerability reporting and maintenance response.