geocoder-php/free-geoip-provider

Release historycaution

The package has 8 releases since August 2017, but none in the last 12 months and the latest was in April 2025. This indicates slowed maintenance, though the long history provides some maturity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. That is a meaningful maintenance concern, although the repository was pushed in November 2025 and the package has organizational backing.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-confidence audit findings, but both of its 2 action references are unpinned. The absence of a top-level permissions block is acceptable here and is not itself a concern.