QCloud IM SDK for PHP - 腾讯云IM SDK
61%
Total Score
caution
Usable with caveats: maintenance is quiet and all workflow actions are unpinned.
Only one registry account has publishing access. That is a thin publishing base and increases continuity risk when paired with the absence of recent commits.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance may be slowing or paused.
The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, though it is not evidence that the package is unsafe.
The only workflow was fully analyzed with no reported audit findings and no untrusted checkout or script-injection paths, but all three action references are unpinned. The missing top-level permissions block is acceptable on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/cache Version ^4.2 | — | — |
mockery/mockery Version ^1.3 | — | — |
monolog/monolog Version ^2.1 || ^3.0 | — | — |
psr/simple-cache Version ^1.0 || ^3.0 | — | — |
guzzlehttp/guzzle Version ^6.5|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.