gemini-api-php/client

Release historycaution

The package has 22 releases, but none in the last 12 months; its latest release was about 20 months ago. This materially raises abandonment risk despite the established release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and indicating currently inactive maintenance.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is not severe on its own.

Workflow auditcaution

All 6 analyzed action references are unpinned, which weakens build reproducibility. However, both workflows were fully analyzed and there are no untrusted checkouts, injection findings, or broad top-level write permissions.