The README explains the narrow command-line utility and the release includes notes, while dependencies remain minimal. Its single-user backing and lack of security tooling limit confidence for long-term maintenance.
58%
Total Score
50
100
83
83
The repository is owned by an individual user rather than an organization, so the single registry maintainer is consistent with the project's backing but leaves a thin continuity path.
The package has only three releases and none in nearly nine years; the last release was published in October 2017. This is strong evidence of inactivity, although the package may be intentionally stable and the repository is not archived.
The repository has zero stars and forks and one watcher, so there is little community evidence to support ongoing maintenance. Popularity is only supporting evidence, so this reinforces rather than determines the result.
Composer is used for builds, but no security-scanning tooling is reported. That is a modest transparency and maintenance gap, especially for a project with no recent activity.
The repository has no security policy. For a small command-line geocoding utility this is a limited gap, but it provides no documented route for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.