The Apache-2.0 license, matching repository, and organization ownership provide clear provenance. It is a minimal Composer metapackage, so missing tests, changelog, and workflows are not concerns.
68%
Total Score
100
100
86
88
This package is brand new: it has one release, published today, with no established release cadence or maintenance history. That limits confidence in long-term continuity.
The repository uses Composer, which fits the package, but no security-scanning tooling was detected. That is a modest transparency gap rather than a severe risk for this minimal metapackage.
No security policy was found in the repository. This is a minor process gap, although the package contains only Composer metadata and delegates its type files elsewhere.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-webcontentpublisher-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.