The package includes tests, a clear MIT license, release notes, and a matching source repository. Its maintenance has stopped, and the package is abandoned in favor of jbelien/geocoder-php-geopunt-provider; use that replacement instead.
20%
Total Score
50
64
Packagist marks the entire package as abandoned and names jbelien/geocoder-php-geopunt-provider as its replacement. This is a direct adoption risk despite the repository remaining available.
The package has six releases since January 2018, but none in the last 12 months; its latest release was in July 2023. The long release intervals and prolonged inactivity indicate abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months. This confirms that maintenance has stopped rather than merely slowed.
The repository is not archived and was last pushed in October 2023, which provides some continuity, but it does not offset the package-wide abandonment notice or absent recent commits.
The single workflow was fully analyzed with no audit findings and no untrusted checkout or script-injection paths. Both action references are unpinned, which is a minor reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
willdurand/geocoder Version ^4.0 | — | — |
geocoder-php/common-http Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.