The package has clear documentation, tests, a matching source repository, and an MIT license. Its release and commit activity stopped about four years and nine months ago, while the repository has no security policy or scanning tools.
52%
Total Score
50
100
83
83
There were no commits and no active maintainers in the last three months, reinforcing that maintenance has stopped rather than merely slowed.
A single registry maintainer is consistent with the repository being owned by an individual, but it also leaves limited visible publishing capacity if that maintainer becomes inactive.
The latest release was published about four years and nine months ago, with no releases in the last 12 months; this is a significant maintenance concern despite 16 releases over the package's lifetime.
There is only one open issue and no recent issue or pull request activity, which is consistent with a quiet project but does not independently prove abandonment.
Composer build tooling is present, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ipinfo/ipinfo Version ^2.2 | — | — |
guzzlehttp/guzzle Version ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.