{"package":"google-adk","ecosystem":"conda","latest_version":"1.14.1","description":"Agent Development Kit","license":"Apache-2.0","license_risk":"permissive","commercial_use_notes":"Permissive: commercial closed-source use OK; preserve the copyright notice.","homepage":"https://github.com/google/adk-python","repository":"","downloads_weekly":233,"health":{"score":42,"risk":"high","breakdown":{"maintenance":10,"popularity":3,"security":15,"maturity":12,"community":2},"deprecated":false,"max_score":100},"vulnerabilities":{"count":1,"critical":1,"high":0,"medium":0,"low":0,"details":[{"vuln_id":"CVE-2026-4810","severity":"critical","summary":"Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability","affected_versions":"<1.28.1|>=2.0.0a1,<2.0.0a2|=0.0.1|=0.0.2|=0.0.3|=0.0.4|=0.0.5|=0.1.0|=0.1.1|=0.2.0|=0.3.0|=0.4.0|=0.5.0|=1.0.0|=1.1.0|=1.1.1|=1.10.0|=1.11.0|=1.12.0|=1.13.0|=1.14.0|=1.14.1|=1.15.0|=1.15.1|=1.16.0|=1.17.0|=1.18.0|=1.19.0|=1.2.0|=1.2.1|=1.20.0|=1.21.0|=1.22.0|=1.22.1|=1.23.0|=1.24.0|=1.24.1|=1.25.0|=1.25.1|=1.26.0|=1.27.0|=1.27.1|=1.27.2|=1.27.3|=1.27.4|=1.27.5|=1.28.0|=1.3.0|=1.4.1|=1.4.2|=1.5.0|=1.6.1|=1.7.0|=1.8.0|=1.9.0|=2.0.0a1","fixed_version":"2.0.0a2","source":"osv","published_at":"2026-04-13T09:31:33Z","in_kev":false,"epss_prob":0.00145,"epss_percentile":0.34506,"threat_tier":"theoretical"}],"actively_exploited_count":0,"likely_exploited_count":0},"versions":{"latest":"1.14.1","total_count":21,"recent":["0.2.0","0.3.0","0.4.0","0.5.0","1.0.0","1.1.1","1.2.1","1.3.0","1.4.1","1.4.2","1.5.0","1.6.1","1.7.0","1.8.0","1.9.0","1.10.0","1.12.0","1.13.0","1.14.0","1.14.1"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":1,"first_published":"2025-04-11 16:52:37.647000+00:00","last_published":"2025-09-15 09:05:52.325000+00:00","dependencies_count":0,"dependencies":[]},"github_stats":null,"bundle":null,"typescript":null,"known_issues":{"bugs_count":0,"bugs_severity":{},"status_breakdown":{},"link":null,"scope":"none"},"historical_compromise":null,"recommendation":{"action":"do_not_use","issues":["1 critical vulnerabilities"],"use_version":"1.14.1","version_hint":"Update to >= 2.0.0a2 to fix known vulnerabilities","summary":"google-adk has critical vulnerabilities — do not use"},"version_scoped":null,"requested_version":null,"_cache":"miss","_response_ms":949,"_powered_by":"depscope.dev — free package intelligence for AI agents","typosquat":{"is_suspected":false},"maintainer_trust":{"available":false},"malicious":{"is_malicious":false},"scorecard":{"available":false},"quality":{"available":false},"version_history_summary":{"total_versions":20,"first_release_age_days":383,"last_release_days_ago":227,"avg_days_between_releases":20,"release_velocity":"moderate"},"popularity_warning":{"this_ecosystem_downloads":233,"more_popular_in":{"ecosystem":"pypi","downloads_weekly":1820027},"hint":"This is the conda package 'google-adk' (233 dl/week). A much more popular package with the same name exists in pypi (1,820,027 dl/week). Confirm you queried the right ecosystem."}}