The package is clearly licensed, has a usable README, and keeps a very small dependency surface. One contributor makes the maintenance base narrow, while no security policy or scanning adds modest transparency risk.
78%
Total Score
83
100
94
50
All 35 recent commits came from one contributor, so maintenance knowledge and review capacity are concentrated despite the active organization-backed project.
Composer is used as the build tool, but no security-scanning tools were detected. The missing scanning is a modest process gap, not evidence of unsafe code.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This reduces transparency but is not independently severe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tencentcloud/common Version >=3.0.1672 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.