The package is small and focused, with a clear README, MIT license, and no install-time scripts. Minimal tooling, no security policy, and very limited repository visibility leave little evidence of ongoing engineering support.
58%
Total Score
50
100
72
80
The package has had seven releases since November 2017, but none in more than four years; this is a meaningful maintenance concern for a Laravel integration.
The artifact and repository match and contain a small, focused nine-file implementation, which supports transparency but provides limited evidence of broader project maturity.
The source repository is owned by an individual rather than an organization, so there is no organizational backing shown to compensate for the thin maintenance evidence.
There are no open issues or pull requests and no recent activity; while this may reflect a small stable project, it provides no evidence of active maintenance.
The repository has one star, zero forks, and one watcher, offering very little community evidence to compensate for the long release gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aliyuncs/oss-sdk-php Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.