cravler/maxmind-geoip-bundle
The package is clearly licensed, documented, and free of install-time scripts. Its single-maintainer project has no recorded commits in the last three months and lacks a security policy, so ongoing support is not well demonstrated.
68%
Total Score
50
88
75
Health Score Breakdown
The package is mature, with releases dating back more than 11 years, but only one release occurred in the last 12 months and releases are typically about 250 days apart. This suggests slow maintenance rather than abandonment, especially because the assessed version is the latest release.
The repository recorded zero commits and zero active maintainers in the last three months. Although a recent release and push show some current activity, the lack of recent development lowers confidence in ongoing maintenance.
The repository has no published security policy, reducing transparency about how vulnerabilities are reported and handled. The small package scope partly limits the concern, but no other security process is provided.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sergei Vizel |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 geoip2/geoip2 Version ^3.0 | — | — |
symfony/console Version ^6.4|^7.0|^8.0 | — | — |
symfony/framework-bundle Version ^6.4|^7.0|^8.0 | — | — |
symfony/dependency-injection Version ^6.4|^7.0|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.