papi-ai/google

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest security-process gap.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response.

Version stabilitycaution

v0.16.1 is not a prerelease, but the package remains below a stable major version, so API maturity is less established despite the active release history.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous sinks or audit findings, but all 11 action references are unpinned and one workflow grants top-level write permissions, creating workflow hygiene risk without an observed exploit path.