As a generated metapackage, its minimal contents and single implementation dependency are appropriate. The project has not yet built a track record, and repository security coverage is limited.
68%
Total Score
75
100
81
88
This package is brand new, with one release and no established release cadence, so long-term maintenance cannot yet be demonstrated.
There were zero commits and zero active maintainers in the last three months. Because the package is only 0 days old, this mainly reflects limited history rather than proven abandonment.
The repository has zero stars, forks, and watchers; for a newly created, narrowly scoped generated package this is weak supporting evidence, not a standalone adoption blocker.
Composer is used for the build, but no security scanning tool was detected, leaving a modest repository-hygiene gap.
The repository has no security policy. This matters less for a small generated type-definition package, but it reduces transparency for reporting security concerns.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-merchant-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.