The package includes a README, tests, an MIT license, and no install-time scripts. It is only 30 days old, with one release and all 10 recent commits from one maintainer, so long-term continuity is not yet proven.
68%
Total Score
75
88
75
The package is only 30 days old and has one release, so there is little release history to establish long-term maintenance or stability.
One contributor made all 10 commits in the last three months, leaving maintenance dependent on a single person and increasing continuity risk.
The project uses Composer, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe risk.
No security policy was found, leaving vulnerability-reporting expectations unclear for adopters.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/http-client Version ^7.2 | — | — |
willdurand/geocoder Version ^4.0 || ^5.0 | — | — |
geocoder-php/common-http Version ^4.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.