yuxiaoyang/getwxopenid

The MIT license, focused nine-file artifact, and usable README provide basic transparency. Maintenance evidence is weak, with no release or repository activity since April 2017 and no security policy, so future compatibility and support are uncertain.

Latest 1.0

Packagist

45%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about 9 years ago, with no releases in the last 12 months. That is strong evidence of an unmaintained dependency, though the small scope may reduce the need for frequent releases.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, while the repository's last push was about 9 years ago. This materially increases abandonment and compatibility risk.

Repo popularity

The repository has 0 stars and 0 forks, with 1 watcher. This provides little evidence of community review or adoption, although popularity alone is not decisive.

Repo tooling

The repository uses Composer build tooling, which fits the package ecosystem, but it has no security scanning tools. The missing scanning is a modest transparency and maintenance gap.

Security policy

The repository has no security policy. For a small package this is not severe by itself, but it leaves vulnerability reporting and response expectations unclear.