集成了部分存储服务
62%
Total Score
caution
Usable with caveats: sparse maintenance activity and limited project support make long-term dependency risk noticeable.
Five runtime dependencies, including three external cloud-storage SDKs and an image-processing library, increase the dependency surface and the number of components that require ongoing compatibility maintenance.
The repository is owned by an individual account rather than an organization, so there is no visible organizational backing to compensate for the thin maintainer and activity signals.
Only 3 releases have appeared over about 3 years and 5 months, with a median gap of about 1 year and 6 months. One release in the last 12 months provides some continuing activity but not a strong maintenance cadence.
There were 0 commits and 0 active maintainers in the last 3 months, which weakens evidence of active maintenance even though the package has a recent release.
The repository has 1 star, 0 forks, and 1 watcher, providing little evidence of a broad user or contributor base. Low popularity is supporting evidence rather than a verdict by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
qiniu/php-sdk Version ~7.0 | — | — |
kosinix/grafika Version ~2.0 | — | — |
qcloud/cos-sdk-v5 Version ~2.0 | — | — |
aliyuncs/oss-sdk-php Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.