Its Apache-2.0 licensing, matching repository, and lack of install scripts are reassuring. The package is brand new, so its maintenance record and long-term reliability remain unproven.
78%
Total Score
100
100
88
88
This package was first released today and has only one release, so there is no track record for release reliability or sustained maintenance yet. Its immediate publication date partly explains the lack of history rather than indicating abandonment.
Composer build tooling is present, but no security-scanning tool is configured. For a small generated metapackage this is a modest transparency gap rather than a severe dependency risk.
The repository has no security policy. That limits the documented process for reporting vulnerabilities, although the package is a small generated type-definition metapackage.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-fcmdata-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.