The package is a small Composer metapackage with a clear README, matching repository, and Apache-2.0 licensing. No security policy or scanning is present, but it has no install scripts or workflow findings that add supply-chain exposure.
65%
Total Score
75
100
81
88
This package was released only once, on the assessment day, so there is no release track record or demonstrated maintenance cadence yet.
No commits or active maintainers were recorded in the last three months. Because the repository was created or updated on the assessment day, this is consistent with a brand-new release but leaves maintenance unproven.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository-hygiene gap.
The repository has no security policy. This is a transparency gap, although the package has no reported workflow or install-script exposure.
Version 0.459.0 is not a prerelease, but the 0.x major version indicates that long-term API stability is not established.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/google-apiclient-services-youtubereporting-impl Version ~0.459.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.