solution25/maxmind

Lifecycle scriptscaution

Composer post-install and post-update scripts run package lifecycle code automatically. This is a supply-chain hygiene consideration, although the signal alone does not show that the scripts are unsafe.

Repo bus factorcaution

One contributor made all commits in the last three months. Organization backing provides some handoff capacity, but no second active contributor is evidenced in this period.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing limited recent repository activity despite the current release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning coverage is a modest repository hygiene gap, not evidence of a defect.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and response expectations for a security-sensitive fraud-prevention plugin.