The package has a clear Apache-2.0 license, tests, and no install-time scripts. Its organization-owned repository is not archived, but it has no security scanning and no recorded activity yet; prefer a later release once it has a track record.
68%
Total Score
75
100
81
83
This is the package's first release, published 0 days ago, so there is no release history or cadence to establish maturity. Its organization-owned repository provides some backing, but not a demonstrated track record.
The repository has recorded 0 commits and 0 active maintainers in the last 3 months. Because the package is newly published, this mainly reflects a lack of established maintenance evidence rather than proven abandonment.
Composer is used as the build tool, but no security scanning tool was detected. The missing scanning is a hygiene gap, not evidence that the package is unsafe by itself.
The repository has no security policy. This limits disclosure transparency, although the package's small, newly created repository and other signals do not make the gap severe.
Version 0.459.0.0 is not a stable-major release, although it is not marked as a prerelease. This is a modest maturity concern rather than a severe stability warning.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
google/apiclient-services Version 0.459.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.