brayun/aliyun-vod

Release historydanger

There has been only one release, published in September 2017, with no releases in the last 12 months. This strongly indicates abandonment risk for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release hiatus and leaving no evidence of current maintenance.

Package scaffoldingcaution

The artifact has no README, which makes integration harder for consumers, but it does include a changelog; the absence of tests in the published package is normal packaging practice.

Repo toolingcaution

The repository uses Composer, but no security-scanning tooling was detected. This is a maintenance and transparency gap, though it is less significant than the lack of recent development.

Security policycaution

No repository security policy was found, reducing transparency for reporting and handling vulnerabilities in a package that has not otherwise shown recent maintenance.