middlewares/geolocation
Documentation, licensing, and repository structure are solid. Pin a reviewed dependency version and monitor future releases before upgrading.
63%
Total Score
75
93
75
Health Score Breakdown
The package has existed since 2016 and has 10 releases, but it has had no release in about 13 months. That indicates slowing maintenance rather than abandonment on its own.
The repository recorded no commits and no active maintainers in the last 3 months. This weakens evidence of ongoing maintenance, although the latest release and push were about 13 months ago rather than several years ago.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, not evidence that the package is unsafe.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 5 referenced actions are unpinned. That leaves the build exposed to upstream action changes despite otherwise clean workflow hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 php-http/message Version ^1 | — | — |
willdurand/geocoder Version ^4 || ^5 | — | — |
psr/http-server-middleware Version ^1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.