Package Health/yii-diandi/yii2-easywechat

yii-diandi/yii2-easywechat

It has a matching source repository, an MIT license, a README, and a security policy. Install-time hooks and absent security scanning add smaller maintenance concerns, while this old release leaves little safety margin.

Latest 1.1.2

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only 3 releases, all clustered around September 13, 2023, with no releases in the last 12 months. This is strong evidence of abandonment risk for a library dependency.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap and indicating no recent maintenance.

Lifecycle scripts

The package defines post-install-cmd and post-update-cmd scripts, which increase installation complexity and execution surface compared with a package without lifecycle hooks.

Repo package mention

The repository name matches the package, but its README does not mention this package and instead describes the upstream EasyWeChat project. That weakens transparency about whether this repository is the maintained source for the release.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these values provide no meaningful community or adoption cushion.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

chunchun

Direct Dependencies

Dependency	Last Release	Score
pimple/pimple Version ^3.0	—	—
symfony/cache Version ^3.3 \|\| ^4.3 \|\| ^5.0 \|\| ^6.0	—	—
monolog/monolog Version ^1.22 \|\| ^2.0	—	—
psr/simple-cache Version ^1.0\|\|^2.0\|\|^3.0	—	—
guzzlehttp/guzzle Version ^6.2 \|\| ^7.0	—	—