igzard/php-geohash

Release historycaution

Only two releases were published, both within about one day, and there have been no releases in the last 12 months despite the package being about 20 months old. This suggests limited ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, reinforcing the maintenance uncertainty shown by the release history.

Security policycaution

The repository has no security policy. For a small library this is a transparency gap, but it is not evidence of abandonment on its own.

Workflow auditcaution

The single workflow was fully analyzed with no detected dangerous findings, but all three action references are unpinned. That is a supply-chain hygiene gap, though not a severe risk by itself.