alibabacloud/ocr-20191230
Its Apache-2.0 licensing, release notes, and matching repository provide useful transparency. The generated SDK has no recent commit activity and lacks a security policy or scanning tools, so ongoing maintenance deserves attention.
78%
Total Score
75
100
94
75
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly offsets this because generated SDKs may change mainly through release generation, but the lack of recent source activity remains a maintenance caution.
Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.
The repository has no security policy. This leaves vulnerability reporting and response expectations unclear, though organizational backing and recent release activity provide some compensation.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alibaba Cloud SDK |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 alibabacloud/darabonba Version ^1.0.0 | — | — |
alibabacloud/credentials Version ^1.2.2 | — | — |
alibabacloud/openapi-core Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.