Package Health

tourze/wechat-work-intercept-rule-bundle

Usable with caveats: it is well documented, tested, licensed, and linked to a matching repository, but maintenance appears to have stalled for about nine months and the project has no security policy or scanning. Its small, unproven repository and large dependency surface warrant review before adopting it broadly.

Latest 0.1.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, which is the strongest evidence of currently stalled maintenance despite the repository not being archived.

Dependency profilecaution

The package declares 30 runtime dependencies, including framework, database, administration, and related WeChat Work bundles; that broad dependency surface increases integration and update burden.

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so the package has limited visible institutional backing.

Release historycaution

Only two releases have been published across about 15 months, with one release in the last year and a median interval of about 160 days; this indicates a young, slow-moving project rather than an established release cadence.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external adoption signal to offset the limited release and commit history.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^3|^2|^1
—
—
doctrine/orm
Version ^3.0
—
—
symfony/yaml
Version ^7.3
—
—
doctrine/dbal
Version ^4.0
—
—
nesbot/carbon
Version ^2.72 || ^3
—
—

Weekly Downloads

Info

Last Published
10 months ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform