The metapackage is clearly documented, correctly linked to an organization-owned repository, and has matching Apache-2.0 licensing. Its zero-day age and lack of observed commit history leave maintenance unproven, so pinning this release should be deliberate.
68%
Total Score
75
100
88
88
This is the package's first release, published 0 days ago, so there is no release cadence or track record to demonstrate sustained maintenance.
No commits or active maintainers were observed in the last 3 months. Because the repository is only 0 days old, this is mainly an absence of history rather than evidence of abandonment, but maintenance remains unproven.
The repository uses Composer build tooling, but no security-scanning tool was detected. This is a modest transparency gap for a package that publishes generated type definitions.
The repository has no SECURITY.md or other security policy, reducing the clarity of vulnerability-reporting procedures.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-integrations-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.