googleads/googleads-php-lib

Lifecycle scriptscaution

The package defines pre-install-cmd and pre-update-cmd scripts. These increase install-time execution risk and deserve review, although the signal alone does not show harmful behavior.

Repo bus factorcaution

One contributor made all commits during the last three months, giving the recent work a 100% concentration. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating limited recent development activity. Regular registry releases partly offset this, but the repository activity remains thin.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool was detected. The missing scanning is a modest transparency and hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy file. For a maintained API client, this leaves vulnerability-reporting expectations unclear and modestly lowers transparency.