jbelien/geocoder-php-geopunt-provider

Project backingcaution

The registry namespace and repository are owned by the same individual, and the repository is not organization-backed. That matches the single-maintainer activity and leaves limited visible organizational redundancy.

Release historycaution

The package is only 29 days old and has one release, so there is not enough history to demonstrate long-term maintenance or release stability.

Repo bus factorcaution

One contributor made all 9 commits in the last 3 months, creating a meaningful continuity risk if that maintainer becomes unavailable. The repository is user-owned rather than organization-backed, so there is no provided evidence of an institutional handoff path.

Repo toolingcaution

Composer is used as a build tool, which fits the PHP package, but no security scanning tools were detected, leaving security-process transparency limited.

Security policycaution

The repository has no security policy, so vulnerability-reporting and response expectations are not documented. This is a hygiene gap, not evidence that the package is unsafe.