Package Health

cartograf/geocoder

The README explains the narrow command-line utility and the release includes notes, while dependencies remain minimal. Its single-user backing and lack of security tooling limit confidence for long-term maintenance.

Latest 1.0.2PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single registry maintainer is consistent with the project's backing but leaves a thin continuity path.

Release historycaution

The package has only three releases and none in nearly nine years; the last release was published in October 2017. This is strong evidence of inactivity, although the package may be intentionally stable and the repository is not archived.

Repo popularitycaution

The repository has zero stars and forks and one watcher, so there is little community evidence to support ongoing maintenance. Popularity is only supporting evidence, so this reinforces rather than determines the result.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is reported. That is a modest transparency and maintenance gap, especially for a project with no recent activity.

Security policycaution

The repository has no security policy. For a small command-line geocoding utility this is a limited gap, but it provides no documented route for reporting vulnerabilities.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tim Stallmann

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
8 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform