aliyuncs/oss-sdk-php

Healthy and suitable to depend on, with some maintenance caveats. The release is current, licensed, tested, and backed by an active organization, but recent repository work is sparse and concentrated in one contributor, with no security policy or explicit workflow permissions.

Latest v2.7.3

Packagist

75%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has been published since 2015 with 26 releases and a median interval of about 80 days, but only one release appeared in the last 12 months. The latest release is recent, so this is a modest maintenance concern rather than abandonment evidence.

Repo bus factor

All recent commits come from one contributor, which creates continuity risk. Organization ownership provides some ability to hand off maintenance, but no second active contributor is shown.

Repo commit activity

Only two commits were made in the last three months, all by one active maintainer, indicating limited recent development activity.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while 47 issues and 25 pull requests remain open; this suggests limited recent community or maintainer responsiveness.

Security policy

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.