zriver/wechat

Release historydanger

The package has had no registry release in more than four years, despite 284 historical releases. That is strong evidence of abandonment for a dependency released as version 6.0-beta17.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, matching the stale registry history. This leaves little evidence of ongoing maintenance.

Repo package mentioncaution

The repository name does not match the package name, but its README explicitly mentions the package. The mismatch is therefore less concerning than an unrelated repository, though it still reduces transparency.

Repo popularitycaution

The linked repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no additional sign of an active community.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, leaving avoidable build-integrity exposure.