The README is detailed, the repository matches the package, and installation has no lifecycle scripts. Its runtime guidance is obsolete and the project shows no recent maintenance or security policy.
38%
Total Score
0
100
75
83
The package has had no release in more than 10 years, with all 8 releases clustered in December 2015. This is strong evidence of abandonment despite the package not being formally deprecated.
The repository has recorded zero commits and zero active maintainers in the last 3 months, with the last push in December 2015. This confirms the long-standing maintenance gap.
The repository has only 2 stars, 0 forks, and 1 watcher. Low adoption is supporting evidence of limited project maturity, though it is weaker than the direct evidence of inactivity.
Composer is used for the build, which fits the package ecosystem, but no security scanning tools are configured. This is a modest hygiene gap rather than evidence of immediate unfitness.
The repository has no security policy. For a tool that connects to Google Analytics accounts, this reduces transparency and gives maintainers no documented channel for reporting security issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ~2.8 | — | — |
symfony/config Version ~2.8 | — | — |
symfony/console Version ~2.8 | — | — |
google/apiclient Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.