The repository is organization-backed and matches the package, with clear licensing and a focused metapackage layout. Its one-day history provides little evidence of long-term maintenance, so pin this version while the project proves its cadence.
70%
Total Score
75
100
86
83
The package was published about one day ago and has only one release, so there is not yet evidence of sustained maintenance or release reliability. Its very recent creation makes the absence of history understandable rather than a severe abandonment signal.
There were no commits or active maintainers in the last three months, but the repository was created or updated about one day ago; this is mainly a lack of historical evidence rather than clear abandonment.
The repository uses Composer build tooling, fitting the package ecosystem, but no security-scanning tool was detected. That is a modest transparency gap for supply-chain assurance, not a severe risk by itself.
No security policy was found in the repository. For a newly published, small metapackage this is a minor process gap, while the clear ownership and simple package scope provide some context.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-analytics-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.