Package Health/cpsit/geo-location-service

cpsit/geo-location-service

The package includes a README, changelog, and small runtime dependency set, while its organization-owned repository remains available and matches the package. Missing security scanning and limited recent development reduce confidence in long-term maintenance.

Latest 0.3.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest registry release was about 6 years and 9 months ago, with no releases in the last 12 months. The repository is not archived, but this release history indicates substantial abandonment risk.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. This weakens evidence of ongoing maintenance, despite the repository's recent push timestamp.

Repo tooling

Composer is used for builds, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, but not severe enough to make the release unfit alone.

Version stability

Version 0.3.0 is not marked as a prerelease, which avoids prerelease risk, but the sub-1.0 version signals a less mature API than a stable major release.