The README, release notes, and MIT license make the package straightforward to evaluate and use. Maintenance stopped nearly six years ago, with no tests or security scanning, so future compatibility and support are uncertain.
42%
Total Score
0
75
50
Only two releases were published, both in October 2020, with none in the last six years. This is strong evidence of abandonment risk for a package that integrates with an evolving external API.
The repository has recorded zero commits and zero active maintainers over the last three months, consistent with the repository's last push being in October 2020. The repository is not archived, but that does not compensate for the prolonged inactivity.
Composer is used for the build, but the repository reports no security-scanning tooling. That leaves fewer automated checks for dependency or release problems in an already inactive project.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported. This is a hygiene and support concern, not evidence that the package is malicious.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
google/apiclient Version 2.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.