macocci7/php-photo-gps
The package is well documented, licensed, tested, and has a clear release record. Its workflow references are unpinned and the repository has no security policy, so pin this version and verify updates if long-term support matters.
70%
Total Score
50
100
88
67
Health Score Breakdown
The package has 25 releases over about three years, but only one release in the last 12 months; this suggests slower recent maintenance rather than abandonment.
There were no commits and no active maintainers in the last three months. Combined with only one registry release in the last year, this is a meaningful sign of slowing activity.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk by itself.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.
The single workflow was fully analyzed with no dangerous sinks or audit findings, but all 6 action references are unpinned. That leaves avoidable build-integrity exposure and warrants caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 macocci7 |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nette/neon Version ^3.4 | — | — |
guzzlehttp/guzzle Version ^7.10 | — | — |
intervention/image Version ^3.11 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.