tourze/wechat-mini-program-user-contracts

Release historycaution

The package is 501 days old with four releases, but only one release in the last 12 months, indicating limited recent maintenance activity.

Repo popularitycaution

The repository has zero stars and forks and one watcher, so there is little external adoption evidence; this is only a modest concern because popularity is supporting evidence rather than a health verdict.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for users and maintainers.

Workflow auditcaution

All three analyzed action references are unpinned, weakening build reproducibility, although both workflows were analyzed cleanly and no dangerous triggers or high-confidence findings were reported.