Its three-file layout fits a focused data package, but it offers little documentation or testing evidence. The declared MIT license and lack of install-time scripts reduce adoption friction.
78%
Total Score
75
100
93
67
The artifact and repository each contain only three files, centered on a service provider and CSV data; this compact structure is consistent with a focused translation-data package, but leaves little transparency beyond the implementation.
There were no commits or active maintainers in the last 3 months. This is partly offset by the release and repository push on July 2, 2026, but it provides limited evidence of ongoing work between releases.
Composer is used as the build tool, but no security scanning tool is present. The missing scanner is a modest hygiene gap rather than evidence of abandonment.
The repository has no security policy. For a small data-focused library this is a transparency gap, but it does not by itself indicate that the release is unsafe to depend on.
No GitHub Actions workflows were present, so there were no workflow risks to assess; this also means there is no automated workflow evidence supporting build or release hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
squirephp/airports Version self.version | — | — |
squirephp/repository Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.