alibabacloud/cms

Usable with caveats: the package is clearly backed by Alibaba Cloud and has a matching repository, but the registry has had no release in over four years and the repository shows no commits in the last three months. Consider the broader Alibaba Cloud SDK if you need ongoing product updates.

Latest 1.8.2294

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has a substantial history with 738 releases, but its latest registry release was over four years ago and there were no releases in the last 12 months. This is a meaningful maintenance concern for a cloud service SDK.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months. Combined with no registry releases for over four years, this raises concern about current maintenance capacity.

Repo issue activity

There were no new or closed issues or pull requests in the last month, and the open-issue count is unavailable. This provides little evidence of active community maintenance, but the missing count should not be treated as a negative finding.

Repo popularity

The repository has no stars or forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these counts provide little external evidence of maturity or broad community support.

Repo tooling

Composer is used as the build tool, but no security scanning tools were detected. This is a transparency and hygiene gap, though it is not by itself evidence that the package is unsafe.