Package Health

akrabat/ip-address-middleware

PSR-15 middleware that determines the client IP address and stores it as a ServerRequest attribute

Latest 2.6.1PackagistPackagist

68%

Total Score

caution

Usable with caveats: maintenance has gone quiet since 2025, and all workflow actions are unpinned.

Health Score Breakdown

Maintainerscaution

Only one registry account has publish access. That is a modest continuity concern for a user-owned project, although the repository and package are clearly linked.

Release historycaution

The package has existed since 2018 with 17 releases, but its latest registry release was about 20 months ago and there were no releases in the last 12 months.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which is evidence of currently quiet maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, injection findings, or write permissions. However, all six action references are unpinned, weakening build reproducibility and action-supply-chain hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Rob Allen

Direct Dependencies

DependencyLast ReleaseScore
psr/container
Version ^1.0 || ^2.0
—
—
psr/http-message
Version ^1.0 || ^2.0
—
—
psr/http-server-middleware
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform