zacksleo/yii2-wechat

Release historydanger

The latest release was published in July 2019, with no releases in the following seven years. That long gap is strong evidence of abandonment risk for a maintained integration library.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the prolonged release gap. This substantially reduces confidence that defects or compatibility issues will be addressed.

Licensecaution

The package includes a license and the repository also has one, so licensing is not absent. However, the manifest declares BSD-3-Clause while the detected license file is MIT, creating a transparency and compliance caution.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The build setup is a modest positive, while the missing scanning is a small hygiene gap.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a secondary concern alongside the much stronger maintenance risk.