alibabacloud/drcloud

The organization-backed repository matches the package and the release is licensed, but the project shows little recent activity or security oversight. Its small, stable artifact is easy to inspect, yet ongoing support is uncertain.

Latest 1.8.884

Packagist

45%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no releases in the last 12 months, and its latest release was published nearly seven years ago. The high historical release count does not compensate for the prolonged release pause.

Repo commit activity

There were no commits and no active maintainers in the last three months, while the repository was last pushed in March 2021. The repository is not archived, but the long inactivity still raises abandonment risk.

Repo popularity

The repository has zero stars and forks and only two watchers, providing little supporting evidence of broad community review or adoption. Popularity is only secondary evidence, so this is a modest concern.

Repo tooling

Composer is used for builds, which fits the package, but no security-scanning tools were detected. This is a hygiene gap rather than evidence that the package is unsafe.

Security policy

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The organization backing provides some context but does not replace a published process.