A clear README, MIT declaration, and release notes improve transparency. Install-time scripts and no security scanning add smaller operational concerns.
42%
Total Score
50
81
67
The package runs post-install and post-update scripts, increasing installation complexity and the amount of publisher code executed by consumers.
This package has only one release, published over three years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, confirming that maintenance has stopped rather than merely slowed.
The linked repository has only 1 star and no forks, providing little evidence of broad adoption or a community likely to sustain it.
Composer is used for builds, but no security-scanning tools are configured, leaving less visible assurance around ongoing source changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
qiniu/php-sdk Version ^7.2 | — | — |
league/flysystem Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.