yymou/taobao-sdk

Release historydanger

This is the only release, published 1519 days ago, with no releases in the last 12 months. The lack of any subsequent release is substantial evidence of abandonment risk.

Maintainerscaution

Only one registry account has publish access. Because the repository is also owned by an individual rather than an organization, there is little visible publishing redundancy.

Project backingcaution

The registry namespace and repository owner match, but both identify an individual user rather than an organization, providing no organizational backing signal.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tooling is configured. This is a hygiene gap that adds some maintenance risk without independently making the release unfit.

Security policycaution

The repository has no security policy, so users have no documented vulnerability-reporting process or response expectations.