The project has a long history, clear licensing, documentation, tests in the repository, and no install-time scripts. Recent maintenance is very thin, with no commits in three months, one release in the last year, no security policy, and all workflow actions unpinned.
58%
Total Score
50
50
75
75
The package declares 11 runtime dependencies across geocoding, React, Symfony, and caching components, creating a relatively broad dependency surface for a library.
The repository is owned by an individual user rather than an organization, so the single registry maintainer offers limited visible backing for continuity.
The package has existed since 2013 with 36 releases, but only one release was published in the last 12 months, indicating a currently slow cadence.
There were zero commits and zero active maintainers in the last three months, a concrete sign that ongoing maintenance capacity is currently weak.
The repository has zero stars and watchers and one fork. Popularity is only supporting evidence, but these counts provide little evidence of broad community adoption.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^1.0 || ^2.0 || ^3.0 | — | — |
react/promise Version ^2.2 || ^3.2 | — | — |
symfony/cache Version ^7.2 | — | — |
symfony/console Version ^5.0 || ^6.0 || ^7.0 | — | — |
react/event-loop Version 1.5.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.