tyhpdef/google-apiclient-services-eventarc

Release historycaution

This package was first released today and has only one release, so there is no historical cadence to demonstrate sustained maintenance. Its zero-day age makes the absence of history expected rather than evidence of abandonment.

Repo commit activitycaution

The repository shows zero commits and zero active maintainers in the last three months, leaving ongoing maintenance capacity unproven. Because the package was created today, this is a limited caution rather than strong abandonment evidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected in the repository. This is a modest transparency and maintenance-hygiene gap, not a standalone supply-chain verdict.

Security policycaution

The repository has no security policy, leaving vulnerability reporting expectations undocumented. For a small newly published type-definition metapackage this is a minor gap, but it reduces operational transparency.