Communicate with Google Analytics API.
60%
Total Score
caution
Usable with caveats: release activity has stopped and recent repository work is absent.
The package has 36 releases since June 2020, but none in the last 12 months; the latest registry release was in October 2024, indicating a prolonged release gap.
The repository recorded zero commits and zero active maintainers in the last three months, which is meaningful evidence of currently inactive development.
There are 9 open issues and 4 open pull requests, with no new or closed issues or pull requests in the last month; this suggests limited recent project response.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package that connects to an external analytics service.
All 12 analyzed action references are unpinned, and two workflows grant top-level write permissions. The high-confidence template-injection findings are hygiene concerns here because no untrusted checkout or injection sink was reported alongside the audited triggers.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
google/auth Version ^1.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.