it-blaster/ip-geo-base-bundle

Release historydanger

The package has only two releases, both in May 2015, and none in the last 12 months despite being over 11 years old. This is strong evidence of abandonment for a dependency intended to remain maintained.

Repo issue activitycaution

There were no new issues, pull requests, or merges in the last month, consistent with the repository's long period without updates. This adds maintenance concern, although inactivity alone is weaker than the release history.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than a severe risk on its own.

Security policycaution

The repository has no security policy, reducing transparency around vulnerability reporting and response for a package that processes IP geolocation data.