tyhpdef/google-cloud-core

Release historycaution

This is the package's first release, published today, so there is no release history or cadence demonstrating sustained maintenance. Its narrow metapackage role limits the concern, but maturity remains unproven.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, but the repository and package were created today. This is mainly an absence of evidence rather than proof of abandonment.

Repo toolingcaution

The repository uses Composer, appropriate for this package, but no security scanning tools were detected. For a tiny generated metapackage this is a modest hygiene gap, not a severe risk.

Security policycaution

No security policy was found in the repository. The package is small and contains only three listed files, which limits the practical impact, but reporting procedures are not documented.