The package is small and easy to inspect, with a clear README and no install-time scripts. Its single-maintainer, low-activity profile leaves little evidence of ongoing support for newer Laravel or WeChat integrations.
43%
Total Score
50
83
75
Only one registry account has publish access, creating a thin operational base. This is a modest concern for a small user-owned project, but it increases continuity risk alongside the long inactivity period.
The latest release was published on May 6, 2021, with no releases in the last 12 months and only two releases overall. This strongly weakens evidence of current maintenance, though the package is not marked deprecated.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since its last release. No provided signal shows compensating recent development.
The repository has four stars, zero forks, and two watchers, providing little evidence of a broad user or contributor community. Popularity is supporting evidence rather than a verdict, so this modestly reinforces the maintenance concern.
The repository has no security policy, which limits documented reporting and response expectations. This is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
overtrue/wechat Version >=4.0.0 | — | — |
laravel/framework Version >=5.8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.