Package Health/ritaswc/wechat-work-robot

ritaswc/wechat-work-robot

The package is clearly licensed and has a readable usage guide, with only two runtime extensions and no install-time scripts. Its repository is not archived and the package name is mentioned in the README, but there is no security policy or automated security tooling.

Latest 1.0.1

Packagist

44%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, both published in November 2020, and none in the last 12 months. This strongly suggests the project is no longer maintained, despite the stable version format.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in November 2020. This is a substantial abandonment concern for a dependency.

Repo popularity

The repository has 2 stars, 0 forks, and 1 watcher, providing little evidence of community adoption or review. Low popularity alone is not disqualifying, but it offers no meaningful compensation for the inactive maintenance record.

Repo tooling

Composer is used for the build, but no security-scanning tools are present. The missing scanning is a hygiene gap rather than a direct safety verdict.

Security policy

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities. This matters more because the project also shows no recent maintenance activity.