阿里巴巴普惠体-Medium
63%
Total Score
caution
Usable with caveats: a single release and no activity since February 2022 limit confidence in ongoing maintenance.
This is the only release, published in February 2022, with no releases in the following 12 months; that is a meaningful maintenance concern for an established package.
There were no commits or active maintainers in the last three months, reinforcing the concern that ongoing project support has stopped.
Composer is used as a build tool, which fits the package ecosystem, but no security scanning tooling was detected; this is a minor transparency gap for a small static package.
The repository is not archived, although its last push was in February 2022, so it remains available without evidence of recent maintenance.
No repository security policy is present, reducing disclosure transparency, though the package is a small font asset with little executable logic.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.