Package Health/alibabacloud/csas-20230120

alibabacloud/csas-20230120

Healthy and suitable to depend on. It has frequent releases, a current non-archived repository, clear licensing, and organization backing; the main caveat is that recent work is concentrated in one contributor and the repository lacks security scanning and a security policy.

Latest 1.28.1

Packagist

84%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes a README and changelog, and the repository uses GitHub Releases; tests are absent in both places, which is a modest transparency gap for a library but is partly offset by the substantial generated SDK layout and release documentation.

Repo bus factor

All 11 recent commits came from one contributor, creating concentration risk. Organizational ownership provides some handoff capacity, but no second active contributor is shown in this signal.

Repo popularity

The repository has zero stars and forks and two watchers, so it has little visible community adoption; popularity is supporting evidence only and does not outweigh its strong release and maintenance record.

Repo tooling

Composer build tooling is present, but no security scanning tools are reported. This is a hygiene gap, though it is not evidence that the release is unsafe by itself.

Security policy

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.