tumobi/weapp-analysis

Release historycaution

The package has had only two releases, both in April 2018, and none in the last eight years. This is strong evidence of abandonment for a maintained SDK, though it is not registry-deprecated.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the last push occurring in April 2018. This materially increases abandonment risk.

Repo popularitycaution

The repository has one star, two forks, and no watchers, providing little evidence of community review or maintenance capacity. Popularity is supporting evidence, but it reinforces the thin project profile.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and assurance gap, especially for an old SDK.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This adds a maintenance and transparency concern.