TencentCloudApi php sdk cloudaudit
72%
Total Score
caution
Frequent releases and organization backing are offset by a single active contributor and limited security transparency.
All 45 recent commits came from one contributor, giving the project a narrow operational base. Organization backing provides some continuity, but no second active contributor is shown to reduce handoff risk.
The repository reports zero stars, forks, and watchers. Popularity is only supporting evidence, so this modestly limits external validation but does not outweigh the active release and commit history.
Composer is used for the build, but no security scanning tools are reported. The missing scanning is a transparency and maintenance weakness, though it is not evidence of malicious behavior.
The repository has no security policy. This makes vulnerability reporting and response expectations less transparent for a package used in cloud API integrations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tencentcloud/common Version >=3.0.1681 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.