xiaohuilam/laravel-wxapp-login

Maintainerscaution

Only one registry publishing account is listed, leaving little visible publishing redundancy. The linked repository is owned by the same individual, so there is no organizational backing to compensate for the thin maintainer base.

Release historycaution

The package has had no registry release in more than seven years, with zero releases in the last 12 months. Its nine releases show an established initial publication history but do not offset the prolonged pause.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project whose latest push was in 2021. This materially raises maintenance and abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a package used for authentication. No provided signal compensates for this gap.