The repository has no security policy and shows almost no community activity. Licensing, tests, and a small dependency set are positives, but this old one-release package needs a maintained alternative.
39%
Total Score
100
69
75
This package has had exactly one release, with no releases in about 10 years. That strongly suggests abandonment and leaves no evidence of ongoing compatibility maintenance.
The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not required for a healthy package, but these counters provide no meaningful community support signal.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest hygiene gap, especially given the repository's lack of recent activity.
The repository is not archived, which is a positive, but it was last pushed in 2016 and therefore provides little evidence of current maintenance.
No security policy was found in the repository. For a package handling cloud API requests, this is a transparency and maintenance gap with no provided compensating evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aliyun/openapi-php-sdk Version v0.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.