This is a generally usable and transparently packaged SDK with an Apache-2.0 license, a matching organization-owned repository, a complete source tree, no deprecation, no install-time scripts, and a stable 1.2.0 release published recently. However, its maintenance profile is mixed: only five releases over roughly three years with two in the last 12 months, no commits or active maintainers in the last three months, no repository tests, and no security policy or scanning tools. The organization backing and recent release activity partly offset the thin repository activity, but developers should monitor future releases and validate the SDK in their own integration tests.
70%
Total Score
75
100
78
90
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alibabacloud/darabonba Version ^1.0.0 | — | — |
alibabacloud/openapi-core Version ^1.0.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.