Package Health

craftcms/google-cloud

Regular releases since 2017 and a documented source repository support continuity. The workflows are auditable but use unpinned actions, so future build updates warrant care.

Latest 2.2.2PackagistPackagist

70%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance slowdown despite the recent release history.

Repo issue activitycaution

There were no new or closed issues and no new or merged pull requests in the last three months, suggesting limited recent community activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

All three workflows were analyzed without failed files, dangerous triggers, untrusted checkouts, or audit findings. However, all 3 action references are unpinned, so their exact revisions are not fixed.

Vulnerabilities

TitleVersionsSeverity
CVE-2026-32266
craftcms/google-cloud is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 2.0.0-beta.1 - 2.2.0.
2.0.0-beta.1 - 2.2.0
Low
AIKIDO-2026-10274
craftcms/google-cloud is vulnerable to Information Disclosure in versions 1.0.0 - 2.2.0.
1.0.0 - 2.2.0
Low

Package versions

Maintainers

Pixel & Tonic

Direct Dependencies

DependencyLast ReleaseScore
craftcms/cms
Version ^4.0.0-alpha.1|^5.0.0-beta.1
—
—
craftcms/flysystem
Version ^1.0.0-beta.2|^2.0.0
—
—
league/flysystem-google-cloud-storage
Version ^3.0.0
—
—

Weekly Downloads

Info

Last Published
7 months ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform