Package Health/alibabacloud/green-20220302

alibabacloud/green-20220302

This is a healthy, actively maintained release with a long history, 67 releases since October 2022, 20 releases in the last 12 months, and a latest release published recently. It is not deprecated or archived, has stable versioning, clear Apache-2.0 licensing, a focused two-dependency runtime profile, and a repository that matches the package and is backed by the Alibaba Cloud SDK organization. The main concerns are that recent repository activity is entirely concentrated in one contributor, the package and repository contain no tests, and no security scanning or security policy is present; these are meaningful hygiene and resilience gaps but do not outweigh the strong release and organizational maintenance evidence.

Latest 3.5.6

Packagist

84%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A README and changelog are present, and GitHub Releases are used, but neither the artifact nor repository contains tests. For an SDK this is a maintenance and regression-confidence gap.

Repo bus factor

All 8 recent commits came from one contributor, giving a bus factor of one. The organization-owned repository provides some handoff context, but no second active contributor is shown.

Repo commit activity

The repository had 8 commits from one active maintainer in the last 3 months, demonstrating current activity but limited breadth of maintenance participation.

Repo popularity

The repository has zero stars and forks and three watchers. This is weak supporting evidence, but popularity is not decisive for a specialized organization-maintained SDK.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a security-hygiene gap, though it is not by itself evidence that the package is unsafe.