tyhpdef/google-apiclient-services-dfareporting

Release historycaution

This package was first published today and has only one release, so there is no release history yet to establish sustained maintenance. Its recency explains the absence of a longer record but does not compensate for it.

Repo commit activitycaution

The repository has no commits or active maintainers in the last three months. Because the package is only zero days old, this is mainly an unproven maintenance record rather than evidence of abandonment.

Repo toolingcaution

The repository uses Composer, appropriate for the package, but no security scanning tool was detected. For a newly published small metapackage this is a modest transparency gap, not a severe risk.

Security policycaution

No security policy was found in the linked repository, leaving vulnerability-reporting expectations unspecified.

Workflow auditcaution

No GitHub Actions workflows were present, so there were no workflow findings; this also provides no automated build or security assurance.