qiuxiang/wechat

Dependency profilecaution

The package declares four runtime dependencies, including PHPUnit as a runtime dependency and no separate development dependencies. That is an unusual and potentially outdated dependency arrangement for a library released in 2014.

Maintainerscaution

Only one registry account has publish access, and the project is backed by an individual repository owner. This creates a thin publishing and continuity base, although the repository and package ownership are aligned.

Release historycaution

The latest release was published in June 2014, with no releases in the last 12 months. The six-release history shows the package has been unchanged for roughly 12 years, which is a substantial abandonment concern.

Repo commit activitycaution

The repository has had zero commits and zero active maintainers in the last three months, consistent with the long period since the latest release. This materially lowers confidence that defects or compatibility issues will be addressed.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, especially for an SDK handling platform messages.