The marketing site https://geminicli.com/extensions/browse/ lists 2 entries for the term gemini-cli-security:
The 2nd entry appears to be an old fork (v0.1.0) of gemini-cli-security which is now at v0.2.0.
It's not clear whether this is accidental or intentional on the part of the owner of the fork.
Anyway, how to avoid this kind of confusion, especially for inexperienced developers who might grab the first thing they click on, without any kind of due diligence?