The Apache-2.0 license and focused metapackage structure are clear, but there is no maintenance track record yet. Pin 0.459.0 and reassess after subsequent releases.
65%
Total Score
75
100
88
88
This is the package's first release, published today, so there is no release cadence or history demonstrating sustained maintenance. Its recent publication explains the gap but does not remove the uncertainty.
No commits or active maintainers were observed in the last three months. Because the repository was created today, this is mainly missing maintenance evidence rather than proof of abandonment, but it limits confidence.
Composer is used as the build tool, matching the package ecosystem. No security-scanning tool was detected, leaving a modest repository-hygiene gap.
The repository has no security policy. For a small metapackage this is a transparency gap, though its limited contents reduce the practical impact.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-playgrouping-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.