jord-jd/php-geolocation

Repo bus factorcaution

All recent commits come from a single contributor, leaving maintenance dependent on one person with no demonstrated backup.

Repo commit activitycaution

There was one commit in the last three months from one active maintainer. This shows some current activity, but the pace is limited.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a process gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerability reports are handled.

Token permissionscaution

The repository workflow does not declare top-level token permissions. No write permissions or other dangerous workflow behavior were observed, which limits the severity of this gap.