alibabacloud/xgippop-20220520

Release historycaution

The package has had no release in about four years despite seven releases overall, indicating a likely inactive maintenance cycle. Its earlier median release interval of about 14 days shows it was previously maintained, which limits the concern to current abandonment risk.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the repository having stopped changing about four years ago. This materially raises abandonment risk for fixes and updates.

Repo toolingcaution

The repository uses Composer, but no security scanning tool was detected. That is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The organization-owned repository provides some compensating project context, but not a response process.