The package has a clear README, stable version, matching repository, and organization backing. Its single release and zero commits in the past three months leave maintenance continuity uncertain.
62%
Total Score
75
100
88
83
Only one release exists, published in July 2025, with no releases in the last 12 months. This is a meaningful maintenance concern, though the package is a synchronized SDK component and may not require frequent independent releases.
The repository recorded zero commits and zero active maintainers in the past three months, indicating no recent maintenance activity. Organization backing and the repository's non-archived state partly offset, but do not remove, that concern.
Composer is used for builds, but no security scanning tooling was detected. The build setup is appropriate, while the missing scanning is a modest transparency gap.
The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alibabacloud/client Version ^1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.