shishaoqi/meituan-flash-purchase

Release historycaution

The package has 11 releases, but its latest release was in July 2022 and it has had no releases in the last 12 months. This long absence lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's prolonged release inactivity. The repository is still present and not archived, which limits the severity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens automated security hygiene for a package handling API credentials and requests.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less serious than evidence of unsafe release behavior.