The package has a small, focused artifact and organization backing, with a recent release and no deprecation. Its consumer documentation is thin, and recent repository activity is quiet, so pinning this version is sensible for a stable data package.
70%
Total Score
75
100
86
75
The artifact has no README, tests, or changelog, but tests and changelogs normally belong in the source repository rather than a published PHP artifact. The missing README is a minor consumer-documentation gap for a library.
The repository recorded zero commits and zero active maintainers during the last three months. The recent release partly offsets this because the package appears small and data-focused, but the quiet period lowers maintenance confidence.
Composer is used as the build tool, which fits the package ecosystem, but no repository security-scanning tool was detected. The missing scanner is a modest hygiene gap rather than evidence of unsafe code.
The repository has no security policy. For a small translation-data package this is a transparency gap, but it does not outweigh the recent release and organization-backed repository.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
squirephp/continents Version self.version | — | — |
squirephp/repository Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.