dicibi/indoregion
Tests, release notes, and an MIT license make the package easy to inspect. Pin this version and expect limited maintenance until a newer release appears.
52%
Total Score
75
88
50
Health Score Breakdown
The latest release was about 2 years 6 months ago, with no releases in the last 12 months. The seven-release history shows prior activity but does not offset the current pause.
The repository recorded no commits and no active maintainers during the last 3 months, consistent with the long release gap and raising maintenance risk.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is not evidence of malicious behavior.
All 9 action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection findings, which limits the severity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Azis Hapidin |
| cacing69 |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 league/csv Version ^9.8.0 | — | — |
illuminate/console Version ^8.0|^9.0|^10.0|^11.0 | — | — |
illuminate/support Version ^8.0|^9.0|^10.0|^11.0 | — | — |
illuminate/database Version ^8.0|^9.0|^10.0|^11.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.