PHP utility functions to validate and normalize IETF BCP 47 language tag.
76%
Total Score
100
93
67
The package has only two releases across about 23 months, with a median interval of about 20 months; the June 2026 release shows activity but the cadence remains slow.
No repository security policy was found, leaving vulnerability-reporting guidance unspecified; this is a minor transparency gap rather than a dependency-blocking risk.
All three workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 10 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wikimedia/bcp-47-code Version ^1|^2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.