life2016/yii2-wechat-sdk
The README and small dependency footprint make the package straightforward to inspect and integrate. Its lone maintainer, absent security policy, and minimal repository activity leave little evidence of ongoing support.
38%
Total Score
38
50
Health Score Breakdown
The package has had only one release, published about nine years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the stable 1.0.0 version.
The artifact includes a license file, but it is detected as MIT while the manifest declares BSD-3-Clause. The release is licensed, yet the mismatch reduces transparency.
The repository has zero stars and forks and only one watcher. Popularity is not decisive for a small package, but these figures provide no supporting evidence of an active user or contributor community.
Composer is used for the build, but no security-scanning tools are configured. The missing scanning is a modest hygiene gap rather than evidence that the release is unsafe.
The linked repository has no security policy. This is a transparency gap for a package handling an external service API, with no provided evidence compensating for it.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 CallMeZ |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version * | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.