aliyun oss sdk
42%
Total Score
unhealthy
Risky: no release or repository activity since July 2019.
This package has had only one release, with no releases in more than seven years. That is strong evidence of abandonment for a dependency that may need compatibility or security updates.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the absence of releases since July 2019.
The release declares Apache License 2.0, but license files were detected as MIT; although the package is licensed, the mismatch creates uncertainty about the applicable terms.
Only one registry account has publish access. Because the repository is user-owned rather than organization-backed, this indicates a thin publishing base and increases continuity risk.
The package includes a README and release notes, and the repository has tests. However, the README's usage section is still marked TODO, limiting consumer guidance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.