Package Health

laravel-road/ibge-locations

It has a clear MIT license, tests, and a repository that matches the package. The project is small, has one registry maintainer, and lacks a security policy.

Latest v0.2.1PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

67

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The latest release was published in January 2021, and there have been no releases in more than five years. Eleven releases show an initial burst but no continuing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating substantial abandonment risk.

Maintainerscaution

Only one account has registry publishing access. The repository is organization-owned, so the short registry list is normal publishing hygiene, but it does not offset the absence of recent activity.

Name lookalikecaution

The package resembles laravel/socialite and is marked as borrowing that identity, but its artifact overlap is 0 and its README does not identify it as that project. This is not strong evidence of a copied package, though the naming is mildly confusing.

Repo popularitycaution

The repository has only 7 stars and 1 fork, providing little evidence of a broad user or contributor base. Low popularity alone is supporting caution rather than a decisive verdict.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Pedro Augusto

Direct Dependencies

DependencyLast ReleaseScore
illuminate/http
Version ^8.21
—
—
guzzlehttp/guzzle
Version ^7.2
—
—
illuminate/support
Version ^8.0
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform