Package Health

alibabacloud/darabonba

Usable with caveats: the package is actively released, licensed, tested in its repository, and backed by Alibaba Cloud. Maintenance is concentrated in one recent contributor, and the repository lacks a security policy and explicit workflow token permissions.

Latest 1.0.5PackagistPackagist

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Dependency profilecaution

The package has 14 runtime dependencies, including several networking and WebSocket libraries, which increases dependency surface but is consistent with its stated client and WebSocket functionality.

Repo bus factorcaution

One contributor made all five commits in the last three months, creating a genuine continuity risk. The repository is organization-owned, which provides some ability to hand maintenance off, but no second active contributor is shown.

Repo issue activitycaution

There are only two open issues and one open pull request, but no issues or pull requests were opened or closed in the last month, providing limited evidence of community responsiveness.

Repo popularitycaution

The repository has six forks and three watchers but no recorded stars, so external adoption evidence is limited. Organization backing and active releases partly compensate for the low popularity signal.

Repo toolingcaution

The repository uses Composer for builds but reports no security-scanning tools, leaving automated security hygiene less visible.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alibaba Cloud SDK

Direct Dependencies

DependencyLast ReleaseScore
ratchet/pawl
Version ^0.4
—
—
ratchet/rfc6455
Version 0.3.0
—
—
alibabacloud/tea
Version ^3.2
—
—
clue/block-react
Version ^1.5
—
—
guzzlehttp/guzzle
Version ^6.3|^7.0
—
—

Weekly Downloads

Info

Last Published
2 months ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform