This release appears suitable for dependency use: it has a long and active release history, a stable non-prerelease version, current repository activity, clear Apache-2.0 licensing, a matching organization-owned source repository, and no registry deprecation or install-time lifecycle scripts. The main concerns are the very small recent contributor base, lack of repository security tooling and policy, and absence of tests; however, the organization backing and continued frequent releases reduce the abandonment risk. Repository popularity is low, but that is supporting evidence rather than a decisive health problem.
82%
Total Score
70
100
83
90
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alibabacloud/darabonba Version ^1.0.0 | — | — |
alibabacloud/openapi-core Version ^1.0.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.