tourze/wechat-mini-program-share-bundle

Dependency profilecaution

The bundle declares 40 runtime dependencies, creating a comparatively broad maintenance and transitive-update surface, although the framework bundle context makes some breadth expected.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. With the latest release also about nine months old at collection time, this indicates slowed maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how maintainers handle vulnerability reports.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, so workflow dependencies can change unexpectedly.