jcove/taobao-sdk
A short README and exact GitHub release provide basic consumer documentation, and the small dependency set keeps integration simple. Its single release from 2017 and unchanged repository leave maintenance and abandonment risk high.
40%
Total Score
100
71
75
Health Score Breakdown
There has been only one release, published about 8 years and 11 months ago, with no releases in the last 12 months. This is strong evidence of an abandoned or unmaintained package.
The repository has only 1 star and 1 fork, indicating limited community adoption. Popularity is supporting evidence rather than a verdict, but it provides little evidence of external maintenance capacity.
Composer is used for builds, which is appropriate for a Packagist package, but no security scanning tools are present. The missing scanning is a hygiene gap rather than evidence that the release is unsafe.
The repository has no security policy, reducing transparency about how vulnerabilities would be reported and handled. This is a secondary concern beside the much older release history.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 jcove |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.