tourze/wechat-official-account-server-message-bundle
Its dependency footprint is broad, repository security scanning is absent, and all four workflow actions are unpinned. The MIT license, tests, release notes, and matching repository provide useful transparency.
61%
Total Score
50
50
79
67
Health Score Breakdown
The package declares 35 runtime dependencies, including several framework and bundle integrations. That broad footprint increases upgrade and transitive-maintenance burden.
The package has only three releases over about 16 months, with one release in the past year and a typical interval of about 92 days. This indicates a small and slowing release history.
There were no commits and no active maintainers in the last three months. Combined with only one release in the past year, this is a meaningful maintenance concern.
Composer build tooling is present, but no security-scanning tool was detected. This is a transparency and maintenance-hygiene gap rather than evidence of malicious behavior.
The repository has no security policy, leaving the preferred process for reporting and handling vulnerabilities undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3|^2|^1 | — | — |
doctrine/orm Version ^3.0 | — | — |
symfony/lock Version ^7.3 | — | — |
symfony/yaml Version ^7.3 | — | — |
doctrine/dbal Version ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.