luojixinhao/aliyun-topsdk

Release historydanger

The package has had no release in more than 9 years, with only five releases overall and none in the last 12 months. That is strong evidence of abandonment for an API client package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release gap and leaving current maintenance capacity unproven.

Repo popularitycaution

The repository has 1 star, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these very low levels provide little external maintenance signal.

Repo toolingcaution

Composer build tooling is present, which supports reproducible package management, but no security scanning tools were detected. This is a modest hygiene concern rather than a direct dependency risk.

Security policycaution

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities. The lack of security scanning tools reinforces this gap, although neither proves a vulnerability.