zoujingli/wechat-php-sdk

The repository remains identifiable, licensed, and documented, with a small runtime dependency set and no install-time scripts. However, the package lacks security tooling and its repository shows no recent commit activity, so the replacement should be preferred.

Latest v1.3.18

Packagist

32%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned and names zoujingli/wechat-developer as its replacement. This is a direct adoption risk even though the repository itself is not archived.

Release history

The package has 48 releases but none in the last 12 months; its latest registry release was nearly seven years ago. The historical cadence shows past activity but does not offset the current release gap.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This indicates little current maintenance capacity, despite a later repository push shown by repository_archived.

Repo tooling

Composer is used for the build, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a standalone reason to reject the package.

Security policy

The linked repository has no security policy. That weakens vulnerability-reporting transparency, although the available evidence does not establish an active security incident.