The Apache-2.0 license, matching repository, and organization ownership provide useful transparency. Its single release and zero recorded activity leave maintenance capacity unproven; pin 0.459.0 while the project establishes a track record.
70%
Total Score
83
100
89
88
This package is brand new, with one release published within the last day and no established release cadence. That limits evidence of maintenance maturity, although it does not show abandonment by itself.
No commits or active maintainers were recorded over the last three months, but the repository is only a few hours old. This is insufficient maintenance evidence rather than proof of abandonment.
Composer build tooling is present, but no security-scanning tooling was detected. For a tiny generated package this is a modest hygiene gap, not a severe supply-chain concern.
The repository has no security policy, reducing disclosure transparency. This is a minor concern for a small type-definition metapackage rather than a release-blocking defect.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-mybusinessbusinessinformation-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.