miaoxing/qcloud
MIT licensing, tests, a changelog, and matching organization-backed source make the package easier to inspect. Maintenance has stalled since May 2025, and the workflow uses an unpinned container image; pin a maintained alternative if ongoing updates matter.
57%
Total Score
50
86
50
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the release-history evidence that current maintenance has stopped.
The package has 43 releases since February 2022, but it has had no release in the last 12 months and was last released in May 2025, indicating stalled maintenance.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented; this is a transparency gap, not evidence of maliciousness.
The release is not a prerelease, but it remains on the 0.x major line, so compatibility guarantees are weaker despite the established release history.
The single workflow was fully analyzed and has no untrusted checkout or script-injection path, but all 49 action references are unpinned and the audit found a high-confidence unpinned container image.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 miaoxing/app Version ^0.10.11 | — | — |
qcloud/cos-sdk-v5 Version ^2.5 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.