tourze/wechat-work-contact-way-bundle

Dependency profilecaution

The package declares 26 runtime dependencies, including framework, database, and related bundle components. This is substantial coupling for a 0.0.1 release and increases upgrade and compatibility risk.

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual account rather than an organization. This provides no strong backing signal beyond the matching ownership.

Release historycaution

This is the only release, published about 15 months ago, with no releases in the last 12 months. That leaves little evidence of an established release cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, despite the repository having been pushed more recently. This weakens evidence of ongoing maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The missing scanner is a modest transparency and maintenance gap, not a release blocker by itself.