The organization-backed repository has matching package documentation, a clear dependency arrangement, and an Apache-2.0 license. There is no security policy or security scanning, so maintenance transparency is still limited.
72%
Total Score
100
100
86
88
The package was published on October 5, 2026 and has only one release, so there is no demonstrated release track record yet. Its same-day repository activity is consistent with a newly created package rather than evidence of abandonment.
Composer is used as the build tool, which fits the package ecosystem, but no security-scanning tool was detected. That leaves a modest verification gap for future changes.
The repository has no SECURITY.md or other security policy. This limits disclosure guidance, though the small metapackage scope reduces the practical impact.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-adsensehost-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.