Package Health

vangenplotz/ip-range-check

The package has a clear MIT license, a usable README, and a changelog, but its tiny project footprint offers little evidence of ongoing care. No security scanning or policy is present, so long-term maintenance and transparency remain weak.

Latest 0.0.4PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

63

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The latest release was published in October 2018, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment risk for a package intended as a dependency.

Repo issue activitycaution

The repository has no open issues or pull requests and recorded no recent issue or pull-request activity. This is consistent with a dormant project, although a small package can legitimately have little issue traffic.

Repo popularitycaution

The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these figures provide no meaningful community or adoption signal to compensate for the inactivity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That weakens release transparency for a package with no other recent maintenance evidence.

Repository archivedcaution

The repository is not archived, which keeps the source available, but its last push was in November 2018 and therefore does not show current maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Vangenplotz

Direct Dependencies

DependencyLast ReleaseScore
craftcms/cms
Version ^3.0.0-RC1
—
—
mlocati/ip-lib
Version ^1.6
—
—

Weekly Downloads

Info

Last Published
7 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform