alibabacloud/devopsrdc

The package is clearly tied to an organization-backed SDK, has a focused five-file artifact, and declares Apache-2.0 licensing. Its lack of security scanning and repository activity leaves maintenance and vulnerability-response capacity uncertain.

Latest 1.8.883

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 365 releases, but none in the last five years; its latest release was in March 2021. The high historical cadence shows prior activity, but does not offset the prolonged release gap.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap. This is a meaningful maintenance concern, although the repository is not archived.

Repo popularity

The repository has zero stars and forks and only three watchers. Popularity is supporting evidence rather than a verdict, but these figures provide little external adoption signal.

Repo tooling

Composer is used as the build tool, but no security-scanning tool was detected. The missing scanning capability is a hygiene and response concern rather than evidence of compromise.

Security policy

The linked repository has no security policy, leaving vulnerability reporting and response expectations unspecified. This is a transparency gap, especially for a package intended for application integrations.