geocoder-php/geoip2-provider
The organization-backed repository includes tests, a changelog, a clear MIT license, and no install-time scripts. Recent release and commit activity is quiet, with no security policy and two unpinned workflow actions.
64%
Total Score
75
90
67
Health Score Breakdown
The package has existed for over 9 years but has only 6 releases, with no releases in the last 12 months; this points to slow maintenance rather than abandonment by itself.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating currently quiet development. The repository was pushed recently according to repository_archived, which partly offsets the concern.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.
The single workflow was fully analyzed with no reported audit findings or untrusted checkout and script-injection sinks. However, both action references are unpinned, which is a workflow hygiene weakness.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 William Durand |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 geoip2/geoip2 Version ^2.0|^3.0 | — | — |
willdurand/geocoder Version ^4.0|^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.