This release appears healthy and suitable for dependency use: it is actively maintained, has 17 releases in the last 12 months, a stable non-prerelease version, an unarchived organization-backed repository, clear Apache-2.0 licensing, and package-specific repository alignment. The main concerns are that recent commit activity is entirely concentrated in one contributor, the repository has no tests or security scanning, and it has very limited public popularity; these are meaningful resilience and transparency gaps but are partly offset by the Alibaba Cloud organization backing and frequent release cadence. No deprecation or install-time lifecycle risks were observed.
82%
Total Score
70
100
83
90
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alibabacloud/darabonba Version ^1.0.0 | — | — |
alibabacloud/openapi-core Version ^1.0.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.