This release appears usable and actively published, with 70 releases over 483 days, 42 releases in the last 12 months, a stable major version, no registry deprecation, no install-time lifecycle scripts, and an artifact containing a substantial README and tests. However, the package has no declared source repository, so maintenance activity, provenance, issue handling, and contributor resilience cannot be verified; the very short median release interval also warrants some caution about release discipline. Overall, it is a reasonable dependency with meaningful transparency and verification gaps.
70%
Total Score
50
100
90
100
Two registry accounts have publish access, which offers some publishing continuity, but administrative access does not demonstrate active maintenance capacity and cannot compensate for the missing repository evidence.
The package has 70 releases across 483 days, including 42 in the last 12 months, which indicates strong ongoing release activity. However, the median interval is about 42 minutes, so the cadence is unusually rapid and provides only limited evidence of deliberate release discipline.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
google/auth Version ~1.0 | — | — |
guzzlehttp/guzzle Version ^6.5 | — | — |
google/cloud-compute Version ~1.0 | — | — |
google/cloud-storage Version ~1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.