Risky to adopt for a new project: this release has had no new release or repository activity for about six years. It has a matching source repository, a clear MIT license, and a useful README, but the lack of ongoing maintenance is a substantial liability.
48%
Total Score
0
75
The package has only one release, published about six years ago, with no releases in the last 12 months. This strongly suggests the package is no longer actively maintained.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating little evidence of ongoing maintenance.
Composer is used for the PHP build, but no security scanning tooling is present. This is a modest transparency gap rather than a severe risk, especially given that the larger concern is the project's age and inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
qiniu/php-sdk Version ^7.2 | — | — |
league/flysystem Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.