Its generated metapackage design keeps the artifact small, with a clear README and a single implementation dependency. Apache-2.0 licensing and organization backing are reassuring, but there is not yet enough history to establish dependable long-term maintenance.
68%
Total Score
83
100
81
88
This package is brand new, with one release published on the assessment date and no established release cadence. That limits evidence of maturity, although the generated-package model may explain the minimal history.
No commits or active maintainers were recorded in the last three months, but the repository and package were created on the assessment date, so this is primarily a lack of history rather than evidence of a collapsed project.
Composer build tooling is present, matching the package ecosystem. No security scanning tools were detected, leaving a modest repository-hygiene gap for a package distributed to dependents.
The repository has no security policy. For a small generated type-definition package this is a limited transparency gap, but it provides no documented path for reporting security issues.
Version 0.459.0 is not a prerelease, which is appropriate for a generated synchronized package, but the package has too little release history to demonstrate stability over time.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-certificatemanager-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.