Package Health

danielsreichenbach/geoip2-update

The package has a clear README, release notes, matching source repository, and an MIT license. Its small project has no security policy or scanning, which leaves maintenance and security transparency weaker.

Latest v2.5.1PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

86

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The latest release was published about 15 months ago, and there were no releases in the preceding 12 months. With only five releases since May 2024, ongoing maintenance appears limited.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long gap since the latest release. This raises maintenance and abandonment risk for a package that performs database updates.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools are configured. The absence of scanning weakens automated security hygiene for this dependency.

Security policycaution

The repository has no security policy, so there is no documented channel or process for handling vulnerabilities. This is a transparency gap, though it is not evidence of a security flaw by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Andrey Tronov
Daniel S. Reichenbach

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
1 year ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform