Client of QCloud.com COS
62%
Total Score
caution
Usable with caveats: maintenance has stalled, with zero commits in three months and only one release in the last year.
post-install-cmd and post-update-cmd scripts run during Composer operations, creating extra installation-time behavior that developers should account for.
Only one registry publishing account is listed, leaving limited publishing redundancy; the matching source repository and recent release provide some compensating evidence.
The package has 23 releases over nearly six years, but only one release in the last year, indicating a slower maintenance pace despite the recent release.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of currently inactive development; the recent release only partly offsets that concern.
The repository has no published security policy, reducing transparency about vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^1.0|^2.0 | — | — |
guzzlehttp/guzzle Version ^7.4 | — | — |
thenorthmemory/xml Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.