Organization backing and a clear Apache-2.0 license support dependable use. Maintenance is concentrated in one contributor, and no security policy or automated security scanning is present.
84%
Total Score
88
100
94
88
All 44 recent commits came from one contributor, creating a real continuity risk; organization ownership provides some ability to hand maintenance off.
Composer build tooling is present, but no security scanning tools were detected, leaving security hygiene less documented than the maintenance picture.
The repository has no security policy, so vulnerability reporting and response expectations are not documented; this is a transparency gap despite strong release activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tencentcloud/common Version >=3.0.1672 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.