imee/aliyun-core

Project backingcaution

The source repository is owned by an individual account rather than an organization, so the single registry maintainer is not offset by visible organizational backing.

Release historycaution

This is the package's only release, published 640 days ago, with no releases in the last 12 months; that is a meaningful maintenance concern for a dependency.

Repo popularitycaution

The repository has zero stars, forks, and watchers, which provides no supporting evidence of community adoption; popularity is only supporting evidence, so this is a moderate concern rather than a decisive risk.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured, leaving a repository hygiene gap.

Security policycaution

The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.