The Apache-2.0 license, matching organization repository, and lack of install scripts are reassuring. The package is still too new to show an established maintenance record, and the repository has no security policy or scanning tool.
67%
Total Score
75
83
83
This package was first released today and has only one release, so there is no established release history or cadence to support long-term maintenance confidence.
No commits and no active maintainers were observed in the last three months, although the repository was only created today; this leaves maintenance capacity unproven rather than showing prolonged abandonment.
Composer build tooling is present, but no security-scanning tool was detected. For a small generated metapackage this is a hygiene gap, not a severe supply-chain warning.
The linked repository has no security policy. This limits disclosure transparency, though the package's small metapackage scope makes the gap less significant than it would be for a large runtime library.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-analyticsreporting-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.