Usable with caveats: the package is clearly backed by Alibaba Cloud, licensed, tested, and tied to a matching source repository. However, it has had no release or commit activity for nearly six years, so ongoing maintenance should not be assumed.
58%
Total Score
67
100
78
88
There were zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since late 2020 and increasing abandonment risk.
The package has seven releases, but its latest release was on December 1, 2020, with no releases in the last 12 months. That long release gap is a meaningful maintenance concern.
The repository has one star and one fork, indicating limited independent adoption or review. Popularity is supporting evidence only, but this provides little additional confidence.
Composer build tooling is present, but no security scanning tools are configured. This is a transparency and maintenance gap, though it is less significant than the demonstrated inactivity.
The linked repository is not archived, but its last push was on December 1, 2020; the non-archived status does not offset the lack of recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alibabacloud/tea Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.