huanqiu/aliyun-dysms-php-sdk

Release historydanger

The package has had only two releases, both in March 2018, with no release in more than eight years. This is strong evidence of abandonment risk for a maintained dependency.

Maintainerscaution

Only one registry publisher is listed, which limits publishing resilience; the linked repository is user-owned rather than organization-backed, so there is little evidence of broader maintenance capacity.

Repo package mentioncaution

The repository name matches the package, but its README does not mention the package. That weakens confirmation that the source repository is maintained specifically for this published package.

Repo popularitycaution

The linked repository has zero stars, forks, and watchers. Popularity is not decisive by itself, but it provides no supporting evidence of active adoption or community oversight.

Repo toolingcaution

Composer is used for builds, which is appropriate, but no security-scanning tooling is present. This is a transparency and maintenance gap rather than a severe risk on its own.