alibabacloud/client

Release historycaution

The package has 67 releases since January 2019, but none in the last 12 months and the latest registry release was in December 2022. This is a meaningful maintenance concern despite the historically frequent release cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent repository push is compensating evidence, but the lack of recent commit activity still weakens confidence in ongoing maintenance.

Repo issue activitycaution

The repository has four open issues and three open pull requests, but no new or closed issues or pull requests in the last month. This suggests limited recent interaction, though the backlog is small.

Security policycaution

No security policy was found in the repository. This is a transparency gap for a client library that handles cloud credentials and API requests.

Workflow auditcaution

The single workflow has no untrusted-trigger sink and no top-level write permissions, but all three action references are unpinned and it installs a package outside a lockfile. These are low-level reproducibility and build-hygiene concerns, not severe risks.