alibabacloud/petadata

Organizational ownership, a stable release line, and a matching repository provide useful continuity. The tiny generated package has a clear README and no install scripts, but it offers no security scanning or security policy.

Latest 1.8.2294

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has a substantial history of 732 releases and very frequent past releases, but none in the last 12 months; the latest release was about 14 months ago. This indicates a meaningful maintenance slowdown.

Repo commit activity

There were no commits and no active maintainers in the repository during the last 3 months. Combined with no registry releases in the last 12 months, this is the main maintenance concern.

Repo tooling

The repository uses Composer, which fits the package ecosystem, but no security scanning tools were detected. That is a transparency and monitoring gap, though not evidence of a harmful release by itself.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, but the organization-backed repository and small package scope partly reduce the practical concern.