The package includes a substantial README, an MIT declaration, and no install-time scripts. The source repository has had no commits for nearly five years and provides no security policy, making maintenance risk high.
44%
Total Score
0
50
71
75
The latest release was in September 2021, with no releases in the following five years despite 14 historical releases. This long silence is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history's prolonged inactivity.
The package declares eight runtime dependencies, including framework and cloud-service integrations. This is a meaningful dependency surface for a dormant library, though it is not excessive by itself.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption signal to compensate for the maintenance gap.
Composer is used for builds, but no security scanning tools are configured. This is a modest transparency gap alongside the project's inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
topthink/framework Version ^6.0 | — | — |
alibabacloud/client Version ^1.5 | — | — |
tlingc/think-aliyunsls Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.