The package has a clear MIT declaration, a compact dependency footprint, and a stable release. Its lone registry maintainer, absent security policy, and repository mismatch leave little evidence of ongoing oversight.
35%
Total Score
50
100
72
75
The latest release was published in June 2018, about eight years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the package having ten historical releases.
Only one registry account has publishing access. A single maintainer increases continuity risk when the project already shows no recent release activity.
The package registry namespace and repository owner are different user accounts, with the repository owned by an individual rather than an organization. This provides limited visible project backing.
There are no open issues or pull requests and no recent activity. This is consistent with a quiet project but offers no evidence of active maintenance.
The repository name does not match lisao/wx and its README does not mention the package. That raises concern that the linked source may not clearly belong to this release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lisao/curl Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.