alibabacloud/resellertrade-20191227
The package has clear licensing, release notes, useful documentation, and organization backing. Its limited release history, inactive recent commits, and lack of security scanning reduce confidence in ongoing maintenance; pin this version if adopting it.
64%
Total Score
75
86
75
Health Score Breakdown
This is the package's only release, with no new release in about two and a half years. That provides limited evidence of ongoing maintenance, although a generated SDK can remain stable after its initial release.
The repository recorded zero commits and zero active maintainers in the last three months. Organization ownership partly offsets the thin observed activity, but does not demonstrate active maintenance.
Composer build tooling is present, but no security-scanning tool was detected. This is a maintenance and transparency gap rather than evidence that the package is unsafe.
The repository has no security policy, leaving no documented process for reporting and handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alibaba Cloud SDK |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 alibabacloud/tea-utils Version ^0.2.19 | — | — |
alibabacloud/openapi-util Version ^0.1.10|^0.2.1 | — | — |
alibabacloud/endpoint-util Version ^0.1.0 | — | — |
alibabacloud/darabonba-openapi Version ^0.2.10 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.