Package Health/topi-wechat-cindy/wechat-developer

topi-wechat-cindy/wechat-developer

MIT licensing, a substantial README, and a stable version make the package easier to evaluate. No security policy and no automated security scanning leave maintenance transparency thin.

Latest 1.1

Packagist

36%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, with none in the last 12 months; its latest release was published in September 2021. This indicates a prolonged lack of maintenance for a dependency that may need compatibility updates.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the old latest release, this is strong evidence that the project is inactive.

Repo package mention

The repository name does not match the package name and its README does not mention the package. This weakens confidence that the linked source actually represents the published package.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these counts provide no supporting evidence of an active user or contributor community.

Repo tooling

Composer is used for builds, which is appropriate for a Packagist package, but no security-scanning tools are configured. The tooling supports packaging while providing little evidence of ongoing security maintenance.