Usable with caveats: it is an actively published, organization-backed SDK with a recent release, but the source repository shows no commits or active maintainers in the last three months. The package also lacks a README and the repository has no security policy or automated security scanning.
62%
Total Score
75
75
83
The release has no README, which makes consumer integration harder; the missing tests and changelog are normal for a published artifact, and a GitHub release exists for this version.
The package has 16 releases over roughly 4 years and its latest release was recent, but only one release appeared in the last 12 months, indicating a relatively slow cadence.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance concern despite the recent release and push.
Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so users have no documented reporting or response process for vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alibabacloud/tea-utils Version ^0.2.21 | — | — |
alibabacloud/credentials Version ^1.1 | — | — |
alibabacloud/gateway-spi Version ^1 | — | — |
alibabacloud/openapi-util Version ^0.1.10|^0.2.1 | — | — |
alibabacloud/darabonba-map Version ^0.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.