alibabacloud/cc5g

Release historycaution

Only one release exists, published over a year ago, with no releases in the last 12 months. This limits evidence of ongoing maintenance, although the package may be a synchronized SDK component.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. Combined with the single-release history, this is the clearest evidence of limited current maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. This is a modest transparency and hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That weakens the project's documented vulnerability-reporting process, though organization backing partly offsets the concern.