aternus/geonames-client

Dangerous workflowscaution

One of three workflows uses pull_request_target, which warrants review because it can run with elevated repository context. No untrusted checkout or script-injection patterns were detected, limiting the concern.

Release historycaution

The project has existed since August 2018 and released this version in March 2026, but only one release occurred in the last 12 months, indicating a slower cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the current maintenance signal is weak.

Repo issue activitycaution

There are no open issues or pull requests, and no issue or pull-request activity in the last month. This is not inherently unhealthy, but it provides little evidence of active community maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap.