vartruexuan/yii-easywechat
A clear README, MIT declaration, and repository tests make the package easier to inspect. Its tiny repository and single publisher provide little evidence of ongoing support.
42%
Total Score
50
88
50
Health Score Breakdown
The package runs post-install and post-update Composer scripts, adding installation-time behavior that deserves scrutiny beyond ordinary dependency resolution.
Only one registry account has publish access, and the project is backed by an individual repository owner rather than an organization. This creates a thin publishing and continuity base.
The package has had no registry release in nearly four years: its latest release was in November 2022, despite only four releases overall. This is strong evidence of stagnation for a library dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of current maintenance.
The repository has 2 stars, 0 forks, and 0 watchers. Popularity is not required for health, but these numbers provide little supporting evidence of broad community adoption or review.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 vendor |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ~2.0.6 | — | — |
w7corp/easywechat Version ^5.30 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.