This release appears generally safe to depend on from a maintenance and transparency perspective: it is not deprecated or archived, has a current release, a clear Apache-2.0 license, a matching repository, and organizational backing from Alibaba Cloud SDK. However, maintenance activity is very light, with only one commit by one contributor in the last three months, and the repository lacks tests, security scanning, and a security policy. The package is therefore usable and reasonably supported, but warrants monitoring and may be less robust than a highly active, extensively tested dependency.
78%
Total Score
70
100
83
90
A README and changelog are present, and the repository also has a changelog and GitHub Releases. Tests are absent in both the artifact and repository, which is a modest transparency and verification gap for an SDK.
All recent activity is concentrated in one contributor with a 100% commit share. That is a caution for continuity, but organization ownership provides some capacity to hand maintenance off.
Only 1 commit from 1 active maintainer was recorded in the last 3 months, indicating very light recent development. This lowers confidence in maintenance responsiveness, although the repository is current and organization-owned.
There were no new or closed issues and no pull requests in the last month; the null open-issues count is unknown. The lack of recent collaboration is a mild maintenance concern, though it may also reflect a stable generated SDK repository.
The repository has 0 stars and 0 forks, with 3 watchers. Low popularity is only supporting evidence and does not outweigh the active organizational backing or package-specific repository match.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alibabacloud/darabonba Version ^1.0.0 | — | — |
alibabacloud/openapi-core Version ^1.0.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.