timerlau/aliyun-afs-php-sdk
The license records conflict, and the repository has no security policy or security scanning; its small dependency footprint and included README and changelog help. Prefer a maintained alternative, or pin this version only after confirming it still supports your PHP and Aliyun integration.
39%
Total Score
100
70
83
Health Score Breakdown
The manifest declares MIT while the artifact license file is detected as Apache-2.0. The release is licensed, but the mismatch reduces transparency about the applicable terms.
The package has had no releases in about eight years, with zero releases in the last 12 months. This is a substantial maintenance concern, although the stable release profile provides some maturity evidence.
The repository is not marked archived, but it was last pushed about eight years ago, which does not offset the lack of recent releases.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The absence of security scanning further limits visible maintenance hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 songmw |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.