xupp/wechat

Release historydanger

This is a single-release package first and last released in September 2018, with no releases in the past 12 months. The long period without updates is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's eight-year release stagnation and limited maintenance capacity.

Licensecaution

The manifest declares MIT, but the artifact license file is detected as Apache-2.0; although a license file exists, the mismatch creates real legal and transparency uncertainty.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools are configured. The absence of scanning is a hygiene gap, though it is secondary to the much longer maintenance gap.

Security policycaution

The repository has no security policy. For a small, inactive SDK this leaves vulnerability-reporting and response expectations unclear, adding to the maintenance concern.