qcloud_sts/qcloud-sts-sdk

Release historycaution

The latest release was in December 2023, with no releases in the last 12 months; this indicates the package may be unattended, although its 11 releases show some prior maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months, consistent with the long release pause and reducing confidence in ongoing fixes.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present; this is a modest transparency and maintenance gap rather than a severe risk by itself.

Security policycaution

The repository has no security policy, which limits vulnerability-reporting transparency for an SDK handling temporary cloud credentials.