firstphp/ip2region

The package has had no release or repository commit since October 2020, and its security policy and scanning coverage are absent. It is licensed, tested, and lightweight, but the long maintenance gap makes pinning this release a liability.

Latest 1.1.7

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was on October 31, 2020, with no releases in the last 12 months despite the package being over six years old. This is a substantial maintenance concern, though the stable 1.1.7 release reduces version-churn risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. The repository is not archived, but there is no observed recent maintenance activity.

Repo tooling

Composer is used as the build tool, but no security scanning tools were detected. This leaves dependency and source-security checks less transparent than they could be.

Security policy

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a meaningful gap for a package that processes IP data, although it does not by itself indicate unsafe code.