guibranco/ipquery-php

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which is a maintenance concern. However, the package released recently and merged 3 pull requests in the last month, partly compensating for the quiet commit window.

Workflow auditcaution

Workflow hygiene is weak: 37 of 38 action references are unpinned, one workflow uses an archived action with high-confidence medium severity, and 1 of 11 workflows could not be analyzed. No untrusted checkout, script injection, or dangerous trigger was found, so this is caution rather than a severe dependency risk.