Package Health/alibabacloud/devs-20230714

alibabacloud/devs-20230714

The repository is clearly tied to the package and backed by an organization, with licensing, release notes, and a stable version. Recent maintenance has slowed substantially, and the repository has no security scanning or published security policy.

Latest 2.4.1

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 8 releases over 848 days, but none in the last 12 months; the latest release was about 13 months ago. This is meaningful maintenance concern despite the earlier release history.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with no releases in the last year, this indicates substantially reduced recent maintenance.

Repo popularity

The repository has no stars or forks and only 3 watchers, so independent adoption evidence is limited. This is supporting context rather than a decisive health problem for an organization-backed SDK.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance-hygiene gap, not a standalone severe risk.

Security policy

The repository has no published security policy. That weakens vulnerability-reporting transparency, although organizational backing and an identifiable source repository partly compensate.