The license is clear, installation has no lifecycle scripts, and the repository matches the package. Organization backing helps, but there is no security policy and no maintenance history beyond the initial publication.
68%
Total Score
75
100
79
83
This is the first and only release, published 0 days ago, so the package has no demonstrated release cadence or track record yet.
There were 0 commits and 0 active maintainers in the last 3 months. Because the package is only 0 days old, this mainly reflects missing history rather than proven abandonment, but it limits confidence.
The repository uses Composer, which fits the package ecosystem, but no security-scanning tools were detected, leaving a modest repository hygiene gap.
The repository has no security policy. This is a transparency and incident-reporting gap, though it is not by itself evidence that the package is unsafe.
Version 0.459.0 is not a prerelease, which is appropriate for a versioned generated package, but the single-release history provides no evidence of stability over time.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-semantictile-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.