Its Apache-2.0 license, small dependency surface, and package README make adoption straightforward. There is no published security policy, so maintenance oversight is less transparent.
79%
Total Score
83
100
94
83
All 35 recent commits came from one contributor, giving the project a high bus-factor risk despite the active commit volume and organization backing.
Composer is used for builds, but no security scanning tool was detected. That limits evidence of automated security oversight, though it does not by itself indicate an unsafe release.
The repository has no SECURITY policy. This reduces transparency around vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tencentcloud/common Version >=3.0.1671 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.