bitgandtter/google-api

Registry deprecationdanger

Packagist marks the entire package abandoned and provides google/apiclient as the replacement. This is a direct adoption warning for this release, despite the linked project remaining active.

Release historycaution

The package has 57 releases over more than 12 years, but its latest registry release was in December 2021 and it had no releases in the last 12 months. That suggests the published package line is stale.

Repo commit activitycaution

The repository recorded one commit in the last three months, showing some ongoing activity but a very low maintenance cadence for a dependency.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention this package. Although the repository is backed by the googleapis organization, the package-to-repository relationship is not transparent.

Workflow auditcaution

All three workflows were analyzed with no high-confidence audit findings or untrusted checkouts, but all 15 action references are unpinned and two workflows grant top-level write permissions. The unpinned actions are a hygiene concern; the write permissions are only a mild caution without an untrusted trigger or sink.