tourze/wechat-pay-score-bundle

Dependency profilecaution

The release declares 35 runtime dependencies, including database, administration, Symfony, and payment integrations. This broad dependency surface increases upgrade and compatibility overhead.

Release historycaution

The package has only two releases, with the latest about nine months ago and a roughly 37-day median interval. This is a young project with limited release history, so long-term maintenance is not yet established.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. For a package released within the last year, this is a meaningful maintenance warning rather than proof of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This leaves dependency and build-risk checks less transparent.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it is not by itself evidence that the package is unsafe.