The README is largely a template, and all 11 workflow actions are unpinned. Its 23 runtime dependencies also increase maintenance burden, despite tests, release notes, and organizational backing.
46%
Total Score
75
50
88
50
The release declares 23 runtime dependencies, creating a broad maintenance and compatibility burden for a package with no recent release activity.
The package has had no release in over two years and no releases in the last 12 months, which is a substantial abandonment concern despite 19 historical releases.
The repository recorded no commits and no active maintainers in the last three months, reinforcing the evidence that maintenance has stopped.
Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap, not evidence that the release is unsafe.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities, although this is secondary to the stronger maintenance concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
torann/geoip Version ^3.0 | — | — |
geoip2/geoip2 Version ^2.13 | — | — |
laravel/scout Version ^10.4 | — | — |
predis/predis Version ^2.2 | — | — |
chapdel/lawyer Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.