hisune/ip2region
It has a clear package identity, one runtime dependency, a readme, and no install-time scripts. The license files also identify MIT alongside the declared Apache-2.0 license, and the repository has no security scanning or security policy.
43%
Total Score
50
100
81
75
Health Score Breakdown
The package declares Apache-2.0 and includes a license file, but the artifact also identifies MIT, creating a license mismatch that should be clarified before adoption.
The package has had no release in more than five years; its latest release was February 2021, indicating a substantial abandonment risk despite eight total releases.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance capacity.
Composer is used for builds, but no security scanning tools are configured; this is a modest transparency and maintenance gap for a package with no recent activity.
The linked repository has no security policy, so there is no documented route for reporting vulnerabilities or communicating security fixes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hisune |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.