aligent/oro-geo-detection
Clear licensing, tests, release notes, and organization backing provide useful transparency. Long release gaps, no commits in the last three months, and unpinned workflow actions leave maintenance and build-hygiene concerns.
66%
Total Score
75
100
93
67
Health Score Breakdown
The package has only three releases since November 2021, with a median interval of about 772 days; the February 2026 release shows it is not abandoned, but cadence is slow.
There were zero commits and zero active maintainers in the last three months, indicating a current maintenance lull after the latest release.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
All four workflows were analyzed without high-confidence audit findings or untrusted triggers, but all 10 action references are unpinned, weakening build reproducibility and update control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Adam Hall |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 oro/commerce Version 6.0.* | — | — |
geoip2/geoip2 Version ~2.0 | — | — |
guzzlehttp/guzzle Version ^7.2 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.