daigo75/geoip

The package is documented and licensed, and its small 25-file tree is easy to inspect. It lacks security scanning and a security policy, adding transparency concerns.

Latest v1.24

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in nearly 13 years: its latest release was October 18, 2013, with zero releases in the last 12 months. This is strong evidence of abandonment for a dependency still being considered today.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the last release. The non-archived status does not compensate for the absence of observed maintenance.

Repo popularity

The repository has zero stars and forks and only one watcher, offering little supporting evidence of an active user or contributor community. Popularity is secondary, but it does not compensate for the inactive maintenance history.

Repo tooling

Composer is used as a build tool, which supports reproducible package installation, but no security scanning tools are configured. For an old dependency, that is a meaningful maintenance and transparency gap.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. The lack of security scanning in the repository tooling provides no compensating evidence.