Package Health/in2code/ipandlanguageredirect

in2code/ipandlanguageredirect

Usable with caveats: the package is mature, clearly backed by an organization, licensed, and still receives occasional repository activity. However, it has had no registry release in over a year, recent work comes from one contributor, and the repository lacks a security policy and explicit workflow permissions.

Latest 13.0.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package has 35 releases over roughly 10 years, but none in the last 12 months, which indicates slower current release activity.

Repo bus factor

All recent commits came from one contributor, creating concentration risk; organization ownership provides some ability to hand maintenance to others but does not remove the current thin activity base.

Repo commit activity

The repository recorded one commit in the last three months, so activity has not stopped, but the pace is modest for an actively maintained dependency.

Security policy

No SECURITY.md or equivalent security policy was found, leaving vulnerability reporting and response expectations unclear.

Token permissions

Neither workflow declares top-level GitHub Actions token permissions, which leaves workflow authorization less explicit than it should be.

Vulnerabilities

Title	Versions	Severity
CVE-2023-35782 in2code/ipandlanguageredirect is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 5.1.2.	0.0.0 - 5.1.2	High