xuxuxuzw/pinduoduo-sdk

Release historydanger

The package has had no release in more than six years; all six releases occurred on its initial release day in August 2020. This is strong evidence of abandonment for an SDK dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of releases and indicating no observed ongoing maintenance.

Repo issue activitycaution

There were no new or merged pull requests and no issue activity in the last month. The null open-issue count limits what can be concluded about unresolved problems, but does not offset the lack of recent work.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency and maintenance concern to an already inactive project.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but its only action reference is unpinned. That is a supply-chain hygiene gap, though no untrusted workflow path was observed.