The package has a clear README, matching Apache-2.0 licensing, and organization-backed source repository. Its single-release history and absent recent commit activity leave maintenance capacity unproven, while the minimal metapackage structure makes missing tests and workflows unsurprising.
70%
Total Score
75
100
86
83
This is the package's first release, published today, so there is no release track record yet; the zero-day age is consistent with a newly generated version rather than evidence of abandonment.
There were no commits or active maintainers in the prior three months, but the repository and package are only 0 days old; this leaves maintenance unproven rather than showing a collapsed project.
Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency gap, not a severe risk for a small generated metapackage.
No security policy was found in the repository, reducing the documented channel for reporting problems; the package's tiny, newly created scope limits the significance of this gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-container-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.