The organization-backed repository matches the package, and its license and dependency declaration are clear. The package is very small and cleanly packaged, but its maintenance record is not yet established.
68%
Total Score
75
88
100
This is the first and only release, published 0 days ago, so there is no release track record or demonstrated continuity yet.
The repository records 0 commits and 0 active maintainers in the last 3 months, which limits evidence of ongoing maintenance; the package's age makes this inconclusive rather than severe.
Composer is used for builds, but no security-scanning tool is present. For a small metapackage this is a modest transparency gap, not evidence of unsafe code.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-sa360-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.