zhaoyj/qq-connect-sdk
This is a small, clearly licensed, non-deprecated PHP SDK with a simple five-file artifact, no install-time scripts, and a linked repository that is not archived and was pushed recently. However, it is extremely new, has only three releases within roughly three hours, no tests or changelog, no security policy or scanning, no observed commit activity over the last three months, and the repository neither matches the package name nor mentions the package in its README. Those gaps make the package usable but immature and insufficiently transparent for a high-confidence dependency decision; consider pinning the version and reviewing the source before adoption.
62%
Total Score
50
100
72
90
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 zhaoyj |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 topthink/framework Version ^6.0 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 days ago
- Created
- 9 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.