simplecms/wechat

Release historycaution

Only 2 releases have appeared over 807 days, with a median interval of about 786 days; the latest release was recent, but the long cadence limits confidence in ongoing maintenance.

Repo bus factorcaution

All 4 recent commits came from one contributor, so maintenance depends entirely on a single person and has limited handoff resilience.

Repo toolingcaution

Composer is used for builds, but no security scanning tooling is configured. The missing scanner is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no reported audit findings and no untrusted checkout or script-injection paths. However, both of its action references are unpinned, which weakens build reproducibility.