The Apache-2.0 license, matching repository, and lack of install scripts support straightforward use. The package is newly published, so it has no demonstrated maintenance record yet; pin it while history develops.
72%
Total Score
75
100
88
83
This is the package's first release, published less than one day ago, so there is no release cadence or track record to establish continued maintenance.
There were no commits or active maintainers in the last three months, but the repository was created less than one day ago; this mainly means maintenance capacity is not yet demonstrated.
Composer build tooling is present. No security scanning tools were detected, a minor hygiene gap for a very small generated package.
The repository has no security policy. This limits disclosure transparency, although the package is a small generated metapackage with no reported workflow or install-script concerns.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-cloudretail-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.