The generated metapackage has clear usage instructions, a matching organization-owned repository, and no install-time scripts. Apache-2.0 licensing and a single implementation dependency keep adoption straightforward.
66%
Total Score
75
100
88
83
This package is brand new: it has one release, published within the last day, and no established release cadence. That leaves ongoing maintenance unproven.
The repository has no commits and no active maintainers in the last three months. Because it was created within the last day, this is mainly limited history rather than evidence of abandonment, but maintenance capacity is not yet demonstrated.
The repository uses Composer, which fits the package, but no security-scanning tools were detected. For this small generated package that is a minor transparency gap rather than a severe risk.
No security policy was found in the repository. This weakens disclosure transparency, although the package is a small generated metapackage with no install-time scripts.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-digitalassetlinks-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.