The package is clearly licensed, documented, and backed by a matching organization repository. Its very limited release and repository history leave maintenance capacity unproven, while the missing security policy is a minor transparency gap.
67%
Total Score
75
100
86
88
This package was first released today and has only one release, so there is not yet enough history to demonstrate a sustained maintenance pattern.
No commits or active maintainers were observed in the last three months. Because the repository and package are newly created today, this is limited evidence rather than proof of abandonment, but maintenance capacity remains unproven.
Composer build tooling is present, but no security scanning tool was detected. This is a modest repository-hygiene gap, not a direct dependency risk.
The linked repository has no security policy, reducing transparency about vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-adexchangebuyerii-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.