geocoder-php/google-maps-places-provider

Release historycaution

The package has eight releases since August 2019, but it has had no release in the last 12 months and its median release interval is about six months. That indicates slower maintenance, though not abandonment by itself.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. Although it was pushed in November 2025, the current inactivity lowers confidence in timely fixes.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tool was detected. The missing scanning coverage is a transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented process for reporting vulnerabilities or coordinating fixes. This is a genuine but non-severe transparency gap.

Token permissionscaution

The single workflow has no top-level token permissions declaration. No workflow requests top-level write access, so the concern is limited to permissions hygiene rather than an observed dangerous capability.