@google/gemini-cli

Workflow auditdanger

The audit is incomplete because only 30 of 47 workflows were analyzed. More importantly, high-confidence template-injection findings overlap with pull_request_target workflows, eval-pr also performs an untrusted checkout, and two workflows use blanket GitHub App permissions; these create meaningful CI supply-chain risk. Low-confidence cache-poisoning findings are secondary.

Build provenancecaution

No build attestation or trusted-publisher identity is present, leaving release provenance less transparent despite the otherwise strong project backing.

Maintainerscaution

The package has Google-domain publishing accounts and organization backing, which supports continuity. The outside-domain publishing account mrdoob (mrdoob.com) is an account-hygiene caution, not evidence of a small maintenance team.

Version stabilitycaution

Version 0.64.0 is not a stable major release and 85% of recent releases are prereleases, so consumers should expect more version churn than with a mature stable major.