xinfox/think-oss-aliyun

Release historydanger

The package has four releases, but none in nearly four years; the latest release was December 20, 2022. This is meaningful evidence of stalled maintenance for a library dependency.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the nearly four-year release gap and increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. That is a modest transparency and maintenance concern, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in this storage integration.