Its stable 1.0.1 layout is small, and the package has no install-time scripts. Documentation and security safeguards are minimal, so future compatibility and maintenance are uncertain.
38%
Total Score
50
50
80
83
The package declares seven runtime requirements, including two cloud-storage SDKs and several PHP extensions. The dependencies are explicit, but the broader integration surface increases maintenance exposure for an inactive library.
The artifact includes a README, but it is only 9 characters long; absent tests and a changelog are normal packaging practice and are not gaps here.
This package has had one release, with no releases in about 6 years and 7 months. That long inactivity is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the past 3 months, consistent with the absence of recent registry releases and suggesting no current maintenance.
The linked repository has no security policy. For a library handling HTTP, cryptography, and cloud-storage integrations, this is a transparency gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
qiniu/php-sdk Version ^7.2 | — | — |
aliyuncs/oss-sdk-php Version ^2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.