The small codebase includes tests and a usable README, but it has no security policy and no recent project activity. Treat this release as a liability unless you can maintain the integration yourself.
40%
Total Score
0
67
50
Only one release exists, and there have been no releases for nearly four years. This is strong evidence of abandonment risk for a dependency receiving no ongoing updates.
The repository had zero commits and zero active maintainers in the past three months, consistent with a project that has stopped receiving maintenance.
No license declaration or license file was found, leaving the terms for using and redistributing this dependency unclear.
The repository uses Composer, but it has no security-scanning tools. This is a modest transparency and maintenance gap, though it is less serious than the prolonged inactivity.
No security policy was found, so there is no documented channel or process for reporting vulnerabilities in this logging SDK.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
uuu9/aliyun-sdk-sls Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.