Package Health/albert-will/php-alibabasdk

albert-will/php-alibabasdk

Its scope is narrow and the dependency surface is minimal. The package has seen no commits or releases for more than three years, while its small, unstarred repository has no tests or security policy. The MIT license and usable README provide some transparency.

Latest 1.0.6

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, with the latest more than three years ago and none in the last 12 months. That long release gap is a substantial abandonment concern, despite the stable 1.0.6 version.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the prolonged release gap. No provided activity signal compensates for this inactivity.

Repo popularity

The repository has zero stars, forks, and watchers, offering no supporting evidence of a broader maintenance or user community. Popularity is only supporting evidence, so this reinforces rather than determines the risk.

Repo tooling

Composer is used for builds, but no security-scanning tooling is present. This is a modest hygiene gap and does not outweigh the stronger maintenance concerns.

Security policy

The repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This is a transparency gap for a package that handles API credentials and requests.