googleapis-common
A common tooling library used by the googleapis npm module. You probably don't want to use this directly.
86%
Total Score
healthy
Frequent releases and active, broadly staffed repository work support this well-maintained release.
Health Score Breakdown
No build attestation or trusted-publisher provenance was recorded, leaving publication origin less independently verifiable despite the package's strong release and repository activity.
The package has a prepare lifecycle script, which adds installation-time behavior, but this signal alone does not show harmful or unusually risky activity.
The linked repository neither matches googleapis-common nor mentions it in its README, creating some uncertainty about the package-to-source mapping. Its organization ownership and active monorepo-style repository reduce, but do not eliminate, that concern.
All 71 analyzed action references are pinned, and the pull_request_target workflow has no untrusted checkout or script-injection findings. Two high-confidence low-severity adhoc-package findings remain, and one of 19 workflows could not be analyzed.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 qs Version ^6.7.0 | — | — |
extend Version ^3.0.2 | — | — |
gaxios Version ^7.3.0 | — | — |
url-template Version ^2.0.8 | — | — |
google-auth-library Version ^11.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 8 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.