bingher/ali-sms

Maintainerscaution

Only one registry maintainer is listed, which leaves a thin publishing base; the linked repository is user-owned, so there is no organization backing shown to compensate for it.

Release historycaution

The package is about 7 years old with 9 releases, but only one release appeared in the last 12 months. This indicates continued publishing, though at a modest cadence.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months. The December 2025 release shows recent publishing, but current development activity is not demonstrated.

Repo toolingcaution

Composer is used for builds, which is appropriate, but no security scanning tooling is present. This is a modest transparency and maintenance weakness rather than a severe risk.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in a package that sends messages through a cloud service.