The MIT license, matching repository, and organization ownership support transparent reuse. The package is small and data-focused, but its maintenance record gives limited confidence for fast-changing location data.
62%
Total Score
67
88
83
The package has 16 releases since November 2016, but none in the last 12 months and its latest release was in July 2023. That is a meaningful maintenance concern for data that may change over time.
The repository recorded zero commits and zero active maintainers in the last three months. For a data package this may reflect infrequent updates, but it still raises the risk that corrections will not be handled promptly.
There are open issues and pull requests, but none were opened, closed, or merged in the last month. This supports the broader evidence of limited current maintenance.
Composer is used for the project build, but no security scanning tools are reported. This is a modest transparency and hygiene gap rather than a severe dependency risk.
The repository has no security policy. This limits guidance for reporting security issues, though the package is primarily static data and no other severe security signal is present.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.