Package Health

tourze/wechat-mini-program-express-bundle

Usable with caveats: it has clear documentation, tests, an MIT license, and a matching repository, but maintenance appears stalled since the latest release about 9 months ago. The immature 0.x version, zero recent commits, broad dependency footprint, and missing security policy warrant review before adopting it.

Latest 0.1.0PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

33

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last 3 months, a concrete sign that maintenance has stalled and abandonment risk is elevated.

Dependency profilecaution

The package declares 30 runtime dependencies, including framework, database, administration, and related bundle components; this broad dependency surface increases upgrade and compatibility burden.

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual account rather than an organization, providing limited backing capacity for a package with no recent commits.

Release historycaution

There have been three releases over roughly 10 months, with a median interval of about 20 days, but no release is shown after December 2025 despite the later assessment date; that gap lowers confidence in active maintenance.

Repo issue activitycaution

There are no open issues or pull requests and no activity in the last month; this is neutral for a small project, but it does not demonstrate an active support channel.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^3|^2|^1
—
—
doctrine/orm
Version ^3.0
—
—
symfony/yaml
Version ^7.3
—
—
doctrine/dbal
Version ^4.0
—
—
symfony/config
Version ^7.3
—
—

Weekly Downloads

Info

Last Published
9 months ago
Created
10 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform