Risky to adopt: the package has had no release or repository activity for over six years, leaving compatibility and maintenance concerns. It is not deprecated or archived, and the package is small and clearly documented, but the abandonment risk is substantial.
42%
Total Score
0
75
50
The latest release was published on July 31, 2020, with no releases in the last 12 months. More than six years without a release is strong evidence of abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long gap since the latest release and indicating no observed ongoing maintenance.
Composer build tooling is present, but no security-scanning tooling was detected. This is a modest process gap, especially alongside the absence of recent maintenance activity.
The repository is not archived, which preserves a path for future maintenance, but its last push was on July 31, 2020 and does not offset the current inactivity shown by release_history and repo_commit_activity.
The repository has no security policy. For a small Codeception extension this is a transparency gap rather than an immediate safety verdict, but it provides no documented channel or process for handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
google/apiclient Version ^2.4 | — | — |
codeception/codeception Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.