jeroendesloovere/geolocation-bundle
It has a clear MIT license, tests, a README, and no install-time scripts. The last release and repository activity were more than 11 years ago, making abandonment and compatibility risk substantial.
38%
Total Score
50
50
75
83
Health Score Breakdown
The package has had no release in more than 11 years, with only three releases overall and none in the last 12 months. This is strong evidence of abandonment for a dependency.
The package has three runtime dependencies, including Symfony HTTP Kernel and a geolocation API library. This is a modest dependency surface, though those old framework integrations may increase compatibility risk over time.
The registry namespace and repository owner match, but the project is maintained by an individual account rather than an organization. This is consistent ownership, though it offers limited visible backing capacity.
Composer is used for builds, but the repository reports no security scanning tools. That is a minor transparency and maintenance gap, not a severe risk by itself.
The linked repository is not archived, but it was last pushed more than 11 years ago. The inactive repository state still supports a meaningful abandonment concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jeroen Desloovere |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/http-kernel Version ~2.3 | — | — |
jeroendesloovere/geolocation-php-api Version 1.2.* | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.