Its long release history and organization-backed repository add confidence. The package is small, licensed, and has no install-time scripts, though maintenance and security visibility are limited.
65%
Total Score
83
100
83
88
The package has existed since May 2019 and has 761 releases, showing substantial release history. However, it has had no release in the 12 months before collection, which lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the three months before collection. That is a meaningful maintenance concern despite the repository's recent push matching the release date.
The repository has only 2 stars and no forks, so community adoption signals are weak. Popularity is supporting evidence rather than a decisive health measure, especially for an organization-maintained SDK component.
Composer build tooling is present, but no security scanning tools are reported. This limits security-process transparency without proving a dependency or release defect.
The repository has no security policy, leaving vulnerability reporting and handling expectations undocumented. Organization backing and the package's small scope partly reduce, but do not remove, this transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alibabacloud/client Version ^1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.