davidepastore/ipinfo
The README, tests, and release notes give consumers useful documentation and evidence of a working project. Workflow pinning and the absence of security scanning add hygiene concerns, while the small maintainer base limits resilience.
52%
Total Score
50
71
75
Health Score Breakdown
A LICENSE file is present in both the artifact and repository, but the manifest declares GPL-2.0+ while the detected license file is GPL-3.0. The mismatch requires resolving which terms govern use.
Only one registry account has publish access, and the repository owner is an individual rather than an organization. This leaves limited publishing and maintenance redundancy, consistent with the inactive repository.
The package has 11 releases since October 2014, but none in the last 12 months and the latest release was in December 2022. This indicates a prolonged maintenance gap for a library that depends on an external service.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push in December 2022. This is strong evidence that active maintenance has stopped.
Composer is used for the build, but no security scanning tools are configured. The missing scanning reduces project hygiene, though it does not by itself show that the release is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 davidepastore |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.