Package Health

tourze/wechat-official-account-qrcode-bundle

Usable with caveats: the package is licensed, tested, clearly backed by a matching repository, and not deprecated. However, it has only one release, no commits in the last three months, no security policy, and very little public adoption, so verify that its dependencies and maintenance still fit your project.

Latest 0.0.1PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Dependency profilecaution

The package declares 28 runtime dependencies, including several framework and related bundle components. This broad dependency surface increases integration and transitive-maintenance burden for a small, early release.

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This provides direct ownership alignment without demonstrating a broad institutional maintainer base.

Release historycaution

This package has only one release, published about 15 months ago, with no releases in the last 12 months. That leaves its release maturity and ongoing maintenance unproven.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last three months, consistent with a package whose only registry release is already about 15 months old. This is the strongest indication of limited current maintenance.

Repo popularitycaution

The repository has 0 stars and 0 forks, with 1 watcher. Popularity is not required for a healthy small package, but these figures provide little independent evidence of community review or adoption.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^3|^2|^1
—
—
doctrine/orm
Version ^3.0
—
—
symfony/yaml
Version ^6.4 || ^7.1
—
—
doctrine/dbal
Version ^4.0
—
—
symfony/config
Version ^6.4
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform