aliyunapi/php-aliyun-open-api-search
The package is small and clearly licensed, but its documentation and safety net are limited. Pin 1.0.1 and avoid relying on ongoing maintenance.
38%
Total Score
50
71
75
Health Score Breakdown
Only two releases were published, both in March 2017, with no release in about nine years. This is strong evidence of abandonment for a dependency that may need compatibility or security updates.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of current maintenance capacity.
The artifact includes a very short README of 36 characters and the repository has no tests or changelog. The GitHub release indicator is positive, but the limited documentation and absent test coverage reduce transparency and change confidence.
The repository has 1 star, 0 forks, and 0 watchers. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of broad community review or support.
The repository has no security policy. This is a transparency and reporting gap, though it is less severe than the clear maintenance concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Xu TL |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 aliyunapi/guzzle-subscriber Version ~1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.