overtrue/wechat
Documentation, licensing, and release notes are present, and the repository is active with two recent contributors. Pinning the replacement package instead avoids the registry's abandonment status.
68%
Total Score
100
92
100
Health Score Breakdown
Packagist marks the entire package abandoned and names w7corp/easywechat as its replacement, which creates adoption and update risk despite the active source repository.
All three workflows were analyzed with no untrusted checkout or script-injection triggers, but all nine action references are unpinned. A low-confidence cache-poisoning finding in the deployment workflow is a hygiene concern rather than decisive evidence on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 overtrue |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nyholm/psr7 Version ^1.5 | — | — |
symfony/mime Version ^5.4|^6.0|^7.0|^8.0 | — | — |
symfony/cache Version ^5.4|^6.0|^7.0|^8.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/simple-cache Version ^1.0|^2.0|^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.