Healthy and suitable to use, with limited history as the main caveat. It has organization backing, a matching repository, a documented release, and no deprecation or install scripts, but only one release and one recent repository commit provide little long-term maintenance evidence.
78%
Total Score
83
100
88
83
The package is 44 days old and has only one release, so its long-term maintenance pattern is not yet established. This is a maturity caveat rather than evidence of abandonment because the repository has recent activity and organization backing.
The repository recorded one commit in the last three months from one active maintainer, which gives some evidence of current maintenance but little evidence of sustained activity.
Composer is used as the build tool, providing expected packaging structure. No security-scanning tools were detected, leaving a modest transparency gap.
The repository has no security policy, so users are given no documented process for reporting vulnerabilities or receiving security guidance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alibabacloud/darabonba Version ^1.0.0 | — | — |
alibabacloud/openapi-core Version ^1.0.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.