gulltour/aliyun

Release historydanger

The package has not released since April 2017, despite having five releases overall. This long absence of new releases is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the preceding three months, consistent with the repository having stopped receiving maintenance years ago.

Licensecaution

A license file is present, so this is not an unlicensed release, but the manifest declares GPL-3.0+ while the artifact license detector identifies BSD-3-Clause. The mismatch requires legal review.

Project backingcaution

The source repository is owned by an individual user rather than an organization, so there is no demonstrated organizational backing to compensate for the thin maintenance evidence.

Repo toolingcaution

Composer is used for builds, which is appropriate for a Packagist PHP package, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap.