sledgehammer/geoip
The package is small, has tests, a README, and one focused runtime dependency, which helps consumers understand and verify it. Organization backing and a non-archived repository provide some continuity, but they do not demonstrate current maintenance.
38%
Total Score
75
100
83
50
Health Score Breakdown
This is the package's only release, published 13 years 11 months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.
The repository has recorded no commits and no active maintainers in the last three months, consistent with the last push in October 2012. Organization ownership does not compensate for absent observed maintenance.
Composer is used for the build, but the repository reports no security scanning tools. That weakens ongoing hygiene evidence, especially for a package with no recent maintenance.
The repository has no security policy. This is a transparency and maintenance gap, although it is secondary to the much older release and commit history.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sledgehammer/core Version * | — | — |
Weekly Downloads
Info
- Last Published
- 13 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.