Package Health/alibabacloud/notifications-20241225

alibabacloud/notifications-20241225

This release appears usable and reasonably transparent, with an Apache-2.0 license, a matching repository, an organization-backed project, a changelog, stable versioning, and recent registry and repository updates. The main concerns are that the repository shows no commits or active maintainers in the last 3 months, contains no tests, has no security scanning or security policy, and has very little visible popularity; these lower confidence in ongoing maintenance and verification, but do not indicate that the package is unfit to use. The package is not deprecated or archived, and its focused SDK structure and modest dependency set are positive compensating evidence.

Latest 1.2.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A README and changelog are present and the repository uses GitHub Releases, which supports transparency; the absence of tests is a meaningful verification gap because no repository tests compensate for it.

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months, which is a concrete maintenance concern despite the recent release and push activity.

Repo popularity

The repository has 0 stars and 0 forks, with 3 watchers; this offers little community validation, though low popularity alone is not decisive for a focused SDK.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured, leaving a repository hygiene and verification gap.

Security policy

The repository has no security policy, which reduces transparency about vulnerability reporting and response expectations.