Package Health/alibabacloud/hologram-20220602

alibabacloud/hologram-20220602

The SDK is clearly documented, licensed, tied to an organization-owned repository, and has no install-time scripts. Its security process is thin, with no security policy or scanning tools, while its newly published history provides little evidence of sustained maintenance.

Latest 1.0.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release and it is newly published, so there is no established release cadence or track record yet. The recent repository publication provides some context but does not replace longer-term evidence.

Repo commit activity

There were no commits or active maintainers in the preceding three months, which would normally weaken maintenance evidence. Because the package and repository are newly published, this is better treated as limited history than as demonstrated abandonment.

Repo tooling

Composer is used for the build, but no security-scanning tools are configured. That leaves a meaningful security-process gap even though the package has a straightforward build setup.

Security policy

The repository has no security policy, so the process for reporting and handling vulnerabilities is unclear. This is a maintenance and transparency concern, not evidence that the package is unsafe.