Clear licensing, a matching source tree, and organization backing make the package transparent and straightforward to inspect. Its single release and absence of recent commits reduce confidence that future fixes will arrive; pin this version if adopting it.
62%
Total Score
75
100
86
88
The package has only one release, published about 2 years and 9 months ago, with no releases in the last 12 months. This is meaningful evidence of limited ongoing maintenance, though the generated SDK may be intentionally stable.
There were no commits and no active maintainers in the last 3 months. Combined with the single-release history, this is the strongest evidence of weak current maintenance.
Composer is used for the build, providing ecosystem-appropriate packaging support. No security scanning tool was detected, a minor hygiene gap that does not outweigh the clear source and license metadata.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency and response-process gap, but not by itself evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alibabacloud/tea-utils Version ^0.2.19 | — | — |
alibabacloud/endpoint-util Version ^0.1.0 | — | — |
alibabacloud/darabonba-openapi Version ^0.2.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.