Clear documentation, a matching repository, and a small dependency set help adoption. The project has no recent maintenance or security policy, while its workflow uses three unpinned actions. Pin this version only if you can accept taking over maintenance.
42%
Total Score
0
100
79
67
The latest release was in September 2021, with no releases in the last 12 months. That long gap is strong evidence of abandonment risk, although the package is not registry-deprecated.
The repository recorded zero commits and zero active maintainers in the last three months, confirming that maintenance has stopped rather than merely slowed.
The repository has zero stars, forks, and watchers, so there is little visible community support to compensate for the lack of maintenance activity.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This adds transparency risk for a package handling Google API credentials.
The sole workflow was fully analyzed with no dangerous sinks or audit findings, but all three action references are unpinned and the workflow has no top-level permissions block. The unpinned actions are a modest supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
google/apiclient Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.