tyhpdef/google-apiclient-services-securesourcemanager

Release historycaution

The package was first and last released on the same day, with only one release and no established release cadence. This limits evidence of ongoing maintenance, though its zero-day age makes the gap expected rather than proof of abandonment.

Repo commit activitycaution

There were no commits or active maintainers in the preceding three months. Because the repository and package are brand new, this is a missing track record rather than clear evidence that maintenance has collapsed.

Repo toolingcaution

The repository uses Composer, appropriate for this package, but no security-scanning tools were detected. For a tiny generated metapackage this is a modest hygiene gap, not a severe supply-chain concern.

Security policycaution

No security policy was found in the linked repository. That reduces disclosure transparency, although the package is a small generated metapackage with no install scripts.

Version stabilitycaution

Version 0.459.0 is not a prerelease, but this is still a new 0.x package with no prior release history to demonstrate stability.