wxm/xuandan-sdk

Release historydanger

The package has only two releases, with the latest published in December 2020 and none in the last 12 months. This long release gap is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's prolonged release inactivity.

Maintainerscaution

Only one registry publisher is listed, and the repository is owned by an individual rather than an organization. This leaves limited visible capacity for continuity if that maintainer stops work.

Package scaffoldingcaution

The package includes a README, but it is only 11 characters long; missing tests and a changelog are normal for a published PHP artifact and are not concerns here. The extremely limited consumer documentation is a minor transparency gap.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security-scanning tooling is present. This is a modest hygiene gap rather than evidence of unsafe code.