wzzwx/yii2-dingtalk-robot

Release historycaution

This is the package's only release, published in November 2020, with no releases in the following nearly six years. That is strong evidence of abandonment risk despite the stable 1.0.0 version.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.

Repo package mentioncaution

The repository name matches the package, but its README does not mention the package. This makes the source relationship and project ownership harder to verify.

Repo toolingcaution

Composer is used for builds, which is appropriate, but no security-scanning tools are present. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy. For a package that sends DingTalk notifications and handles tokens or secrets, this reduces transparency around vulnerability reporting and response.