surfoo/georoadbook
The repository has two active contributors, tests, a changelog, and Composer security scanning. The MIT declaration conflicts with the README's Apache 2.0 claim, and workflow references are unpinned.
67%
Total Score
67
50
88
50
Health Score Breakdown
The release declares 18 runtime dependencies, including several extensions and application-level components. This is a relatively broad dependency surface that increases maintenance and compatibility burden.
The artifact declares MIT and includes an MIT license file, but the README says Apache License 2.0. That mismatch creates a genuine licensing clarification concern.
The package runs post-install and post-update Composer scripts, increasing installation complexity and execution surface compared with a package without lifecycle hooks.
The repository is owned by an individual user rather than an organization, so the small maintainer base and concentrated commit activity are more significant.
Only two releases are recorded, with the latest published seven years ago and none in the last 12 months. Recent repository activity partly offsets the stale registry cadence, but the depended-on release is old.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Surfoo |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ~2.0 | — | — |
silex/silex Version ~2.0 | — | — |
cebe/markdown Version ~1.0 | — | — |
symfony/asset Version ^3.2 | — | — |
twbs/bootstrap Version ^3.3 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.