The stable major version, matching source repository, and Apache-2.0 declaration support predictable use. Maintenance has gone quiet recently, so pinning this release is more prudent than expecting active fixes or rapid updates.
67%
Total Score
83
100
88
75
This is a mature package with 776 releases since May 2019, but it has had no releases in the last 12 months despite a previously rapid cadence. That recent pause is a meaningful maintenance concern, though it does not indicate abandonment by itself.
The repository had zero commits and zero active maintainers in the last 3 months. Combined with the absence of releases in the last 12 months, this points to slowed maintenance.
The repository uses Composer for builds, which fits the package ecosystem. No security scanning tools were detected, a minor transparency and hygiene gap that is outweighed by the matching, organization-owned repository.
No repository security policy was found, leaving vulnerability-reporting guidance unspecified. This is a hygiene gap rather than a direct dependency-health failure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alibabacloud/client Version ^1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.