The Apache-2.0 license, clear README, and matching organization repository improve transparency. Its maintenance capacity is not yet proven, so pin this version until follow-up releases appear.
68%
Total Score
83
100
89
88
This package is newly published, with one release and no established release cadence. That limits evidence of ongoing maintenance, although its age is effectively zero and this is not abandonment evidence by itself.
There were no commits or active maintainers in the previous three months. Because the repository was created and the release published at the same time, this is limited evidence rather than strong abandonment evidence, but maintenance remains unproven.
The repository uses Composer build tooling, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a modest transparency gap, not a dependency blocker for this small metapackage.
No repository security policy was found. That reduces disclosure transparency, but the package is a small metapackage with no observed lifecycle scripts or workflow activity to amplify the concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-testing-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.