The organization-backed repository matches the package, and the Apache-2.0 license and dependency layout are clear. Its tiny generated-package shape is sensible, but there is no maintenance track record or security policy yet.
68%
Total Score
75
100
88
88
The package is newly published, with one release and no established release cadence. This limits evidence of continued maintenance, though it is not abandonment evidence for a release created today.
The repository recorded zero commits and zero active maintainers in the prior three months. Because the package is only 0 days old, this mainly means there is no demonstrated maintenance history yet.
Composer is used as the build tool, which fits the ecosystem, but no security-scanning tooling is reported. This is a modest transparency gap rather than a severe risk for this small metapackage.
The repository has no security policy. That reduces disclosure transparency, although the package's narrow metapackage role limits the operational impact.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-datafusion-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.