Package Health

ether/simplemap

The repository remains unarchived, has a substantial source tree, and documents this release with notes. No commits landed in the last three months, while 72 issues remain open and no security policy is provided.

Latest 5.0.4PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

92

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Are you affected? Scan for Free

Health Score Breakdown

Release historycaution

The package has 77 releases over nearly nine years, but none in the last 12 months and its latest registry release was on November 11, 2024. This is a meaningful maintenance concern despite the historically regular release interval.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance for this release line.

Repo issue activitycaution

The repository has 72 open issues, with one new issue and no issues or pull requests closed or merged in the last month. That suggests limited recent issue follow-through.

Security policycaution

No security policy is present in the linked repository, leaving vulnerability-reporting expectations and response procedures undocumented.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2024-10386
ether/simplemap is vulnerable to Malicious Code in versions 1.0.0 - 3.9.4, 4.0.0 - 4.0.7 and 5.0.0 - 5.0.0.
1.0.0 - 3.9.44.0.0 - 4.0.75.0.0 - 5.0.0
Critical

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
mapkit/jwt
Version ^1.1.2
—
—
craftcms/cms
Version ^5.0.0
—
—
geoip2/geoip2
Version ~2.0
—
—
guzzlehttp/guzzle
Version ^6.3.3|^7.2.0
—
—
what3words/w3w-php-wrapper
Version 3.*
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform