techqjyd/aliyun-oss

Release historydanger

The package has had no releases in roughly 9 years, with all 12 releases concentrated by March 2017. That strongly indicates abandonment risk for a dependency intended to integrate with an external service.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and leaving no evidence of current maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a standalone supply-chain verdict.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in an otherwise long-unmaintained package.