wish-cloud/aliyun-sls

The package has a clear MIT license, tests, a readable README, and a GitHub release for this version. Its small release history and no commits in the last three months limit confidence in ongoing maintenance, while the repository has no security policy or scanning tools.

Latest v1.0.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository owner is an individual account rather than an organization. That provides less visible institutional backing, while the matching repository and package references provide some compensating ownership evidence.

Release history

Only two releases exist across about 15 months, with one release in the last 12 months and a typical interval of about 11 months. This is a thin maintenance record for a library dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. That is direct evidence of currently inactive development and raises abandonment risk.

Repo tooling

The project uses Composer, but no security scanning tools were detected. The missing scanning coverage is a modest supply-chain hygiene gap, not evidence that the package is unsafe.

Security policy

The repository has no security policy. This weakens the project's documented process for receiving and handling vulnerabilities, although it does not by itself show an active security issue.