The package has a clear MIT license, a useful README, and a small dependency footprint. Its source repository is not archived, but the maintenance signals are too weak for a new dependency.
20%
Total Score
50
100
57
75
Packagist marks the entire package as abandoned, with no replacement named. This is a severe adoption risk even though the assessed release is otherwise valid.
The package has 35 releases but none in the last 12 months; its latest release was over a year ago. That indicates the project is no longer actively shipping fixes or improvements.
The repository recorded no commits and no active maintainers in the last 3 months. This reinforces the abandonment concern rather than showing ongoing maintenance.
The repository has no stars or forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide no external sign of a broad maintenance or user community.
Composer is used as the build tool, but no security scanning tools are present. The missing scanning is a modest transparency gap, secondary to the stronger maintenance concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
stevebauman/location Version ^6.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.