tyhpdef/google-apiclient-services-webrisk

Release historycaution

Only one release exists and it was published 0 days ago, so there is no release history yet to demonstrate sustained maintenance. This is tempered by the package being newly introduced rather than demonstrably abandoned.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, but the repository and package are 0 days old; this provides little evidence of ongoing maintenance rather than proving a collapse in activity.

Repo toolingcaution

The repository uses Composer build tooling, which fits the package ecosystem, but no security scanning tools were detected. For this tiny generated package that is a modest transparency gap, not a severe risk.

Security policycaution

No security policy was found. That weakens documented vulnerability-reporting practices, although the package is a small metapackage with no install-time scripts.