alibabacloud/nis

Release historycaution

This is the package's only release, published about 14 months ago, with no releases in the last 12 months. That weakens evidence of ongoing maintenance, although a synchronized SDK component may not need frequent independent changes.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Combined with the single-release history, this provides limited evidence of continuing maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tool was detected. The missing scan is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a security-process gap, not evidence that the release is malicious.