pengxuxu/hyperf-easywechat6
The repository includes tests, release notes, and a focused dependency set. Workflow references are unpinned and one uses an archived action, while the lack of recent maintenance increases the chance of stale compatibility.
58%
Total Score
50
100
92
50
Health Score Breakdown
The package has 11 releases since November 2022, but none in the last 12 months; its latest release was in December 2024, about 21 months ago. This indicates a meaningful maintenance slowdown.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. The existing release history provides some maturity evidence, but current maintenance capacity is not demonstrated.
The repository has no security policy and no security scanning tools. This reduces transparency and vulnerability-reporting readiness, although it does not by itself show an unsafe release.
All 4 analyzed action references are unpinned, and the audit found one high-confidence medium-severity use of an archived action. No untrusted checkouts, script injection, or broad top-level write permissions were found, limiting the impact to workflow hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 w7corp/easywechat Version ^6.11.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.