The MIT license and small dependency set are positives, but the lone maintainer and negligible repository adoption provide little cushion. The package README describes a different GD demo, which makes the release contents difficult to trust for an OSS client.
38%
Total Score
38
100
61
83
The package has had no release in over seven years and only five releases overall, indicating severe abandonment risk despite its stable latest version.
The repository recorded zero commits and zero active maintainers in the last three months, confirming that maintenance has effectively stopped.
One registry maintainer account is responsible for publishing the package, leaving limited visible publishing continuity for an independently owned project.
The artifact includes a README and the repository reports tests, but the published README describes a ThinkPHP GD demo and not Aliyun OSS, creating a material transparency concern.
The registry namespace and repository owner are different individual accounts, with no organization backing shown, so there is limited evidence of durable project support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzle/http Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.