tourze/wechat-mini-program-appid-contracts

Project backingcaution

The registry namespace and repository owner match, and the project is backed by the named individual account rather than an organization. This is coherent ownership evidence, though the single-owner structure limits redundancy.

Release historycaution

The package has only two releases over roughly 16 months, with one release in the last 12 months; this suggests limited maintenance capacity, though the repository was pushed recently.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, so there is little public adoption evidence; this is a supporting concern rather than a decisive problem for a small focused package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small interface package this is a hygiene gap rather than a severe risk.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the package's narrow interface scope limits the practical concern.