Documentation, licensing, tests, and organization backing provide useful support. The workflow audit found no active injection or permission hazards, but action pinning remains incomplete.
72%
Total Score
67
93
75
There were no releases in the past 12 months, and the median release interval is about 26 months, indicating a slow maintenance cadence. The latest release is still relatively recent rather than abandoned outright.
All one recent commit came from a single contributor, leaving near-term activity concentrated. Organization ownership provides backing, but no second active contributor is shown.
The repository received one commit in the past 3 months, showing some current activity but limited maintenance momentum.
The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities.
The sole workflow was fully analyzed with no injection, permission, or high-severity findings. Both of its action references are unpinned, leaving a moderate reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
willdurand/geocoder Version ^4.0|^5.0 | — | — |
geocoder-php/common-http Version ^4.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.