alibabacloud/ess
The small generated artifact is clearly tied to an organization-backed Alibaba Cloud repository and has a focused dependency profile. Its rapid historical release cadence and stable versioning help, but recent maintenance and security transparency are limited.
68%
Total Score
83
100
88
75
Health Score Breakdown
The package has 765 releases over about 7 years, with a historically rapid median interval of roughly 6 hours, but none in the last 12 months; this suggests a mature package whose maintenance has recently paused.
There were no commits and no active maintainers in the last 3 months, which is a meaningful maintenance concern, although the package's generated and synchronized design may explain some inactivity.
Composer is used for builds, providing normal ecosystem tooling, but no security scanning tools were detected; this is a modest transparency and hygiene gap.
The repository has no security policy, leaving vulnerability-reporting expectations unclear and slightly reducing security transparency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alibaba Cloud SDK |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 alibabacloud/client Version ^1.5 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.