Its Composer-only metapackage structure is clearly documented, licensed, and free of install scripts. The linked organization repository has no security policy or scanning evidence; pin this version while its maintenance record develops.
70%
Total Score
75
100
81
88
This is the package's first release, published 0 days ago, with only one release overall. That leaves no meaningful maintenance or reliability history, though the package is too new for a long release gap to indicate abandonment.
The repository has 0 commits and 0 active maintainers in the last 3 months. Because it was created on the release date, this is mainly a lack of track record rather than evidence of a collapsed project.
Composer build tooling is present, but no security-scanning tools were detected. For a small package this is a modest transparency and hygiene gap, not a standalone adoption blocker.
The linked repository has no security policy. This reduces transparency around vulnerability reporting, though the package's narrow metapackage role limits the practical impact.
Version 0.459.0 is not a prerelease and has no recent prerelease history. The 0.x major version still signals a less mature compatibility contract than a stable-major release.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-cloudlifesciences-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.