This is a healthy, actively maintained SDK release with a nearly five-year history, 81 releases, 34 releases in the last 12 months, a stable non-prerelease version, current repository activity, organization backing, clear Apache-2.0 licensing, and a package tree consistent with a substantial generated PHP client. The main concerns are a single active contributor, no repository security policy or security-scanning tooling, no tests in either the artifact or repository, and limited repository popularity; these are meaningful hygiene and resilience gaps but are partly mitigated by the Alibaba Cloud organization ownership, regular release cadence, changelog, and matching repository. It appears reasonable to depend on, with normal supply-chain and maintenance review appropriate for a generated SDK.
82%
Total Score
90
100
83
90
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alibabacloud/darabonba Version ^1.0.0 | — | — |
alibabacloud/openapi-core Version ^1.0.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.