alibabacloud/geoip-20200101
The Apache-2.0 declaration, matching source repository, and release documentation provide useful transparency. No security policy or scanning is reported, so maintenance and security oversight are limited.
58%
Total Score
75
86
75
Health Score Breakdown
The package is about 5 years old but has only 2 releases, with no release in the last 12 months and the latest published in March 2021. This indicates a substantially inactive release line, although the stable version and generated SDK context partly reduce the concern.
The repository recorded 0 commits and 0 active maintainers during the last 3 months, consistent with the package's long release gap. The repository is not archived, but there is no recent activity demonstrating ongoing maintenance.
Composer is used for the build, which supports reproducible package structure, but no security scanning tools are reported. The missing scanning is a modest oversight rather than evidence that the package is unsafe.
The linked repository has no security policy. This weakens the project's disclosure and response transparency, with no provided evidence compensating for the gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alibaba Cloud SDK |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 alibabacloud/tea-utils Version ^0.2.0 | — | — |
alibabacloud/endpoint-util Version ^0.1.0 | — | — |
alibabacloud/darabonba-openapi Version ^0.1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.