alibabacloud/umeng-finplus-20220913

Release historycaution

The package is about 370 days old with only two releases and one release in the last 12 months, indicating a limited maintenance track record. The recent release means it is not clearly abandoned, but the cadence is thin.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Organization backing and the January release partially offset this, but the current maintenance signal is concerning.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is little community adoption evidence. Popularity is only supporting evidence, and the organizational backing and matching repository provide stronger context here.

Repo toolingcaution

The repository uses Composer for builds, which supports reproducible package management, but no security scanning tools were detected. For an SDK this is a transparency gap rather than a severe risk.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented. The package's organizational ownership is a compensating signal, but not a substitute for a published process.