movemoveapp/laravel-maxmind

Package scaffoldingcaution

The release includes a substantial README and GitHub release notes documenting the new API and tests, which supports consumer understanding. The artifact and repository report no tests, but tests are normally kept in the source repository and their absence is a modest transparency concern for a library.

Release historycaution

The package has only two releases, both on the same day, and no releases in about 16 months. That leaves maintenance continuity uncertain for a dependency, despite the recent release history showing an initial burst of activity.

Repo popularitycaution

The repository has zero stars and forks and only two watchers, so there is little external adoption evidence to support long-term maintenance confidence. Low popularity is supporting caution rather than a health verdict by itself.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are configured. This is a hygiene gap that matters for a reusable library, though it is not evidence of a specific vulnerability.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, but the small package scope and absence of other severe repository risks keep this as a caution rather than a danger.