swisnl/geocoder-php-nationaal-georegister-provider

Release historycaution

The package has 10 releases since February 2018, but none in the last 12 months; the latest release was about 17 months ago. This indicates a meaningful maintenance slowdown for a package that has otherwise been released regularly.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly 17-month gap since the latest release. This raises abandonment and responsiveness concerns.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tool was detected. The missing scanner is a transparency and hygiene gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a small provider this is not severe on its own, but it leaves vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

Both workflows were analyzed successfully and have no untrusted checkouts or script-injection findings, but all five action references are unpinned and the audit found a high-confidence unpinned container image. This creates avoidable build reproducibility and supply-chain hygiene risk.