lidelin/aliyun-openapi-core

Licensedanger

No registry license, license file, or repository license file was detected, leaving the legal terms for dependency use unclear.

Release historydanger

This package has only one release, published about eight years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk.

Maintainerscaution

Only one registry maintainer is listed. The linked repository is user-owned, so there is no organizational backing shown to offset the narrow maintainer base.

Repo package mentioncaution

The repository name matches the package, but its README does not mention the package, creating some uncertainty about how directly the repository documents this published artifact.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a moderate hygiene gap alongside the package's long inactivity.