tourze/wechat-official-account-draft-bundle
The package includes tests, a matching repository, and a clear MIT license. No repository security scanning or security policy is present, leaving less operational context for long-term use.
62%
Total Score
79
75
Health Score Breakdown
This package has had only one release, published about 1 year and 4 months ago, with no releases in the last 12 months. That weakens evidence of ongoing maintenance.
Composer build tooling is present, but no security scanning tools are configured. That leaves a meaningful verification gap for a package with several runtime dependencies.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.
Version 0.0.1 is not a stable major release, so its API and maintenance maturity are less established than those of a mature stable package.
Both workflows were analyzed successfully and have no dangerous triggers, untrusted checkouts, or audit findings. However, all 4 action references are unpinned, which weakens build reproducibility and update control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/orm Version ^3.0 | — | — |
symfony/yaml Version ^6.4 || ^7.1 | — | — |
doctrine/dbal Version ^4.0 | — | — |
symfony/config Version ^6.4 | — | — |
symfony/http-kernel Version ^6.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.