xinfox/wechat-platform

Licensecaution

The manifest declares MIT, while the artifact license file is recognized as Apache-2.0. The license file means the release is licensed, but the mismatch should be resolved before adoption.

Release historycaution

The package has 46 releases since April 2021, but none in the last 12 months; its latest release was about 19 months ago, indicating maintenance may have stalled.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap and raising abandonment concerns.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured, leaving security-related changes with less automated oversight.

Security policycaution

The linked repository has no security policy, so it provides no documented process for reporting or handling vulnerabilities.