tyhpdef/google-apiclient-services-factchecktools

Release historycaution

This package was released today and has only one release, so there is no historical evidence of reliable maintenance or release continuity. That is a meaningful maturity gap, though it is expected for a newly published package.

Repo commit activitycaution

The repository has no commits and no active maintainers recorded in the last three months. Because the package is newly released, this may reflect a newly generated repository, but it still leaves ongoing maintenance capacity unproven.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tool is configured. For a tiny generated metapackage this is a hygiene gap rather than a severe supply-chain concern.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the package's small metapackage scope limits the practical impact.