geocodio/geocodio-library-php

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts add install-time behavior that developers should inspect, but this is a hygiene concern rather than a severe health risk by itself.

Maintainerscaution

Only one account has registry publish access, which is a modest publishing resilience concern; organization backing provides some context but does not add another observed publisher.

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk; organization ownership may allow handoff, but no second active contributor is observed.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, with 1 active maintainer, showing limited recent development activity despite the recent release cadence.

Repo toolingcaution

Composer build tooling is present, but no repository security scanning tools were detected, leaving a security-hygiene gap.