yuanchao/pdd-union-php-sdk

Release historydanger

This package has only one release, published in February 2020, with no releases in the last 12 months. That long absence of updates is strong evidence of abandonment risk for a dependency.

Maintainerscaution

A single registry maintainer can be adequate for a small package, but there is no organizational backing shown here to offset the long period without releases or repository changes.

Repo issue activitycaution

The repository has no open issues or pull requests and no issue or pull-request activity in the last month. Combined with the old last push, this supports the conclusion that the project is inactive.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security-scanning tooling is present. This is a modest hygiene gap rather than evidence that the release is unsafe.

Repository archivedcaution

The repository is not archived, which is a compensating positive, but it was last pushed in February 2020. Its inactive state still weakens confidence in future maintenance.