It has clear Apache-2.0 licensing, tests, and a matching organization-owned repository. The package is too new to demonstrate sustained maintenance or release stability, so pinning this exact version is prudent.
68%
Total Score
75
100
81
88
This is the first and only release, published today, so there is no release history or cadence demonstrating sustained maintenance.
There were no commits or active maintainers in the preceding three months. Because the repository was created or updated on the release date, this is mainly a lack of demonstrated history rather than evidence of abandonment.
Composer is used for builds, but no security-scanning tool was detected. The missing scanner is a modest supply-chain hygiene gap, not a standalone severe risk.
The repository has no security policy. This limits vulnerability-reporting transparency, although the package's same-day creation means there is little history to evaluate.
Version 0.459.0.0 is not a prerelease, but the package has only one release, so practical stability is not yet demonstrated.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
google/apiclient-services Version 0.459.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.