gupalo/geoip2

The package includes tests, a usable README, a clear GPL-3.0 license, and no install-time scripts. Maintenance evidence is weak: there have been no commits in three months and no releases in roughly 14 months, with no security policy or scanning.

Latest 1.4

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has five releases, but all were concentrated around its initial publication and there have been no releases in the last 12 months. That makes ongoing maintenance uncertain despite the stable release line.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, and its last push was roughly 14 months ago. The repository is not archived, but this sustained inactivity raises abandonment risk.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external adoption signal to offset the quiet maintenance record.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This lowers project transparency, although it is not as severe as an archived or deprecated project.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
twig/twig Version ^3.10	—	—
geoip2/geoip2 Version ^3.0	—	—
symfony/http-client Version ^6.0\|^7.0	—	—
symfony/http-foundation Version ^6.0\|^7.0	—	—
ip2location/ip2location-php Version ^9.7	—	—