Its Apache-2.0 licensing, automated test files, and organization-owned repository provide a useful baseline. The package has not yet demonstrated sustained maintenance or security practices.
68%
Total Score
75
100
79
75
The package is brand new, with one release published today and no release interval history. This limits evidence of maturity, although the lack of history is expected for a newly introduced package.
The repository has no commits or active maintainers in the past three months, but the repository itself was created or updated today. This is primarily a lack of demonstrated maintenance history for a new package.
Composer build tooling is present, but no security-scanning tool was detected. The missing security tooling is a hygiene limitation, not evidence that the package is unsafe.
The repository has no security policy. That reduces transparency about vulnerability reporting and response expectations, though it is a moderate governance gap for a newly published package.
Version 0.459.0.0 is not a stable major release, but it is not marked as a prerelease and there is no prerelease history. This is a modest maturity concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
google/apiclient-services Version 0.459.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.