Öffentliches RegisterExzellent
Software-GesundheitsberichtSchema 0.27.0 · Metriken 2.5.0 · 2026-08-02 09:46 UTC
dereuromark / cakephp-geo
A CakePHP plugin around geocoding tools and helpers.
dereuromark/cakephp-geo erreicht einen Gesundheitsindex von 86 von 100 und liegt damit im Bereich Exzellent. Am stärksten schneidet es bei Engineering Quality (94/100) ab, am schwächsten bei AI Readiness (45/100). Zuletzt heute aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
86
gesamt / 100Software-Gesundheitsindex
Metriken werden auf einer standardisierten Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr gewichtetes Mittel, kalibriert auf die Verteilung des öffentlichen Registers, sodass die Stufen Perzentilbedeutung tragen; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze Gefährdet von 34.
86
Außergewöhnlich93-100Die Spitzengruppe des Registers (≈ obere 5 %); erfüllt im Wesentlichen alle geprüften Kriterien
Exzellent80-92Durchgehend stark; geringfügige Lücken
Gut65-79Gesund; Lücken sind begrenzt und beherrschbar
Mittel50-64Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Schwach35-49Wesentliche Schwächen in mehreren Bereichen
Gefährdet20-34Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-19Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Der gewichtete Gesamtwert 72 wird auf der veröffentlichten Indexskala auf 86 kalibriert (Register-Kalibrierung 2026-08-02).
Eigentümerschaft
Mark SchererPersönliches Konto
748 Follower123 öffentliche Reposseit Dez. 2008Available as (Cake)PHP expert
Dieses Repository gehört einem persönlichen Konto. Ein Projekt mit nur einem Eigentümer trägt ein höheres Kontinuitätsrisiko als ein organisationsgetragenes.
Paket-Ökosysteme
| Registry | Paket | Version | Downloads / Monat | Versionen | Zuletzt veröffentlicht | Tags |
|---|---|---|---|---|---|---|
| Packagist | dereuromark/cakephp-geo | 3.8.0 | 2.735 | 43 | vor 90 Tagen | geocodinghelpersplugingoogle-mapscakephpmapslocationadmin-panelcoordinates |
Metriken nach Kategorie
Vitalität
Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?
85
Entwicklungsaktivität
80Exzellent
Wie die Bewertung erfolgt
| 36/36 | Push-Aktualität — letzter Push vor 0 Tagen |
| 18/36 | Commit-Rhythmus — 26/52 Wochen mit Commits |
| 16.5/18 | Commit-Volumen — 67 Commits im letzten Jahr |
| 10/10 | OpenSSF Scorecard: Maintained — 14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Verwendete Eingangsdaten
| commits_last_year | 67 |
| human_commit_share | 0,99 |
| days_since_last_push | 0 |
| active_weeks_last_year | 26 |
Release-Disziplin
92Exzellent
Wie die Bewertung erfolgt
| 27/27 | Liefert Releases aus — 43 Releases veröffentlicht |
| 36/36 | Release-Aktualität — letztes Release vor 89 Tagen |
| 19.8/27 | Release-Rhythmus — ein Release etwa alle 88,4 Tage |
| 0/10 | OpenSSF Scorecard: Signed-Releases — keine Daten |
Verwendete Eingangsdaten
| releases_count | 43 |
| latest_release_tag | 3.8.0 |
| releases_from_tags | nein |
| days_since_latest_release | 89 |
| mean_days_between_releases | 88,4 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Community & Verbreitung
Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?
55
Popularität & Verbreitung
44Schwach
Wie die Bewertung erfolgt
| 27.6/60 | Stars — 51 Stars |
| 12.2/25 | Forks — 30 Forks |
| 3.9/15 | Watcher — 6 Watcher |
Verwendete Eingangsdaten
| forks | 30 |
| stars | 51 |
| watchers | 6 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community-Gesundheit
70Gut
Wie die Bewertung erfolgt
| 22.5/22.5 | README |
| 22.5/22.5 | Lizenz — anerkannte Lizenz (MIT) |
| 18/18 | CONTRIBUTING-Leitfaden |
| 0/13.5 | Verhaltenskodex |
| 0/7.2 | Issue-Vorlage |
| 0/6.3 | PR-Vorlage |
Verwendete Eingangsdaten
| has_readme | ja |
| has_license | ja |
| readme_badges | — |
| has_contributing | ja |
| has_issue_template | nein |
| has_code_of_conduct | nein |
| readme_badge_services | — |
| has_pull_request_template | nein |
Wie die Bewertung erfolgt
| 45.8/80 | Downloads pro Monat — 2.735 Downloads/Monat über packagist |
| 4.7/20 | Abhängige in der Registry — 4 Pakete hängen davon ab |
Verwendete Eingangsdaten
| packages | dereuromark/cakephp-geo |
| dependents | 4 |
| ecosystems | packagist |
| total_downloads | 189.748 |
| monthly_downloads | 2.735 |
Nachhaltigkeit & Governance
Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?
68
Maintainer-Resilienz (Bus-Faktor)
37Schwach
Wie die Bewertung erfolgt
| 9/54 | Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab |
| 4.4/22.5 | Commit-Verteilung — wichtigste beitragende Person verfasste 80 % der Commits |
| 13.5/13.5 | Breite der Beitragenden — 22 Beitragende |
| 10/10 | OpenSSF Scorecard: Contributors — project has 6 contributing companies or organizations |
Verwendete Eingangsdaten
| bus_factor | 1 |
| contributors_sampled | 22 |
| top_contributor_share | 0,803 |
Wie die Bewertung erfolgt
| 42/42 | Issue-Lösungsquote — 100 % der Issues geschlossen |
| 25.4/30 | PR-Annahme — 60/71 entschiedene PRs gemergt |
| 0/13 | Newcomer PR acceptance — kein PR eines Erstbeitragenden in 30 Tagen entschieden |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/29 approved changesets -- score normalized to 0 |
Verwendete Eingangsdaten
| merged_prs | 60 |
| open_issues | 0 |
| closed_issues | 34 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 11 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): newcomer_pr_acceptance. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
| 10/30 | Organisatorische Trägerschaft — persönliches (Nutzer-)Konto |
| 0/20 | Verifizierte Domain — für Nutzerkonten nicht anwendbar |
| 20.7/25 | Reichweite des Inhabers — 748 Follower von dereuromark |
| 25/25 | Kontohistorie — 123 öffentliche Repos, Kontoalter ca. 17 Jahre |
Verwendete Eingangsdaten
| followers | 748 |
| owner_type | User |
| is_verified | — |
| owner_login | dereuromark |
| public_repos | 123 |
| account_age_days | 6.442 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Verifizierte Domain. Die verbleibenden Gewichte wurden renormalisiert.
Paketpflege
100Außergewöhnlich
Wie die Bewertung erfolgt
| 25/25 | Veröffentlicht & auflösbar — 1 Paket(e) auf packagist |
| 35/35 | Veröffentlichungsaktualität — letzte Veröffentlichung vor 90 Tagen |
| 20/20 | Versionshistorie — 43 veröffentlichte Versionen |
| 20/20 | Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen |
Verwendete Eingangsdaten
| packages | dereuromark/cakephp-geo |
| ecosystems | packagist |
| any_deprecated | nein |
| min_days_since_publish | 90 |
Engineering-Qualität
Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?
94
Engineering-Praktiken
90Exzellent
Wie die Bewertung erfolgt
| 24/24 | CI-Workflows — 2 Workflow(s) |
| 24/24 | Tests vorhanden |
| 16/16 | Linter-Konfiguration — phpcs.xml, phpstan.neon |
| 0/9.6 | Pre-Commit-Hooks |
| 6.4/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 13 out of 13 merged PRs checked by a CI test -- score normalized to 10 |
Verwendete Eingangsdaten
| has_ci | ja |
| has_tests | ja |
| has_editorconfig | ja |
| has_linter_config | ja |
| has_precommit_config | nein |
Dokumentation
100Außergewöhnlich
Wie die Bewertung erfolgt
| 30/30 | README |
| 25/25 | Dokumentationsverzeichnis |
| 15/15 | Dokumentations-/Homepage-Site — https://dereuromark.github.io/cakephp-geo/ |
| 10/10 | Repository-Beschreibung |
| 10/10 | Topics — 6 Topics |
| 10/10 | Wiki |
Verwendete Eingangsdaten
| topics | cakephp, cakephp-plugin, php, geocoder-provider, geocoding, geocoder |
| has_wiki | ja |
| homepage | https://dereuromark.github.io/cakephp-geo/ |
| has_readme | ja |
| has_docs_dir | ja |
| has_description | ja |
Sicherheit
Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?
60
Sicherheitslage
50Mittel
Wie die Bewertung erfolgt
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0.8/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 13 out of 13 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/29 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 6 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — keine Daten |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Lizenz — license file detected |
| 7.5/7.5 | Maintained — 14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — keine Daten |
| 0/5 | Pinned-Dependencies — keine Daten |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — keine Daten |
| 0/7.5 | Token-Permissions — keine Daten |
| 4.5/7.5 | Vulnerabilities — 4 existing vulnerabilities detected |
Verwendete Eingangsdaten
| source | openssf_scorecard |
| checks_evaluated | 13 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 5 |
| scorecard_aggregate | 5 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Die verbleibenden Gewichte wurden renormalisiert.
Abhängigkeits-Advisories
100Außergewöhnlich
Wie die Bewertung erfolgt
| 35/35 | Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory |
| 0/25 | Indirekte Abhängigkeiten ohne bekannte Advisories — transitive Menge in diesem Bereich nicht von Entwicklungs- und Test-Abhängigkeiten trennbar |
| 0/40 | Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum |
Verwendete Eingangsdaten
| source | osv |
| advisories | 4 |
| affected_packages | 2 |
| assessed_packages | 174 |
| unassessed_packages | 15 |
| affected_by_severity | high 1, moderate 1 |
| direct_affected_packages | 0 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Indirekte Abhängigkeiten ohne bekannte Advisories, Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. 174 aufgelöste Abhängigkeiten wurden mit OSV abgeglichen. 15 konnten nicht bewertet werden — keine aufgelöste Version, ein nicht unterstütztes Ökosystem oder außerhalb der ausgewiesenen Paketliste. Dieses Repository veröffentlicht kein Paket, das der Index auflöst; bewertet wurde daher der Abhängigkeitsgraph des Repositorys. Dieser Graph vermischt Entwicklungs- und Test-Pins mit ausgelieferten Abhängigkeiten, daher werden nur die deklarierten Laufzeit-Abhängigkeiten bewertet; transitive Befunde werden als Kontext ausgewiesen und fließen nicht in die Bewertung ein. Erreichbarkeit wird nicht analysiert.
AI Readiness
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Trägt ein bewusst kleines Gewicht (4 %): Agenten-Tooling ist ein echtes Pflegesignal, doch ein Repository ohne jedes Signal kann weiterhin 100/100 erreichen.
45
AI-Agentenkontext & Leitlinien
20Gefährdet
Wie die Bewertung erfolgt
| 0/45 | Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln |
| 0/15 | Maschinenlesbare Doku (llms.txt) |
| 19.9/40 | Lesbare Commit-Historie — 37 von 99 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text) |
Verwendete Eingangsdaten
| has_llms_txt | nein |
| legible_history_share | 0,374 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Wie die Bewertung erfolgt
| 0/18 | Bootstrap mit einem Befehl |
| 22/22 | Automatisierte Tests |
| 11/11 | Lint-/Format-Konfiguration — phpcs.xml, phpstan.neon |
| 0/11 | Statische Typprüfung |
| 10/10 | Reproduzierbare Umgebung — lockfile |
| 2/10 | Belegte Agentenpraxis — 1 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben |
| 8/8 | Automatisierte Wartung — 1 der letzten 100 Commits sind automatisierte Abhängigkeits-Updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — keine Daten |
Verwendete Eingangsdaten
| has_nix | nein |
| has_tests | ja |
| lockfiles | package-lock.json |
| has_dockerfile | nein |
| typed_language | nein |
| bootstrap_files | — |
| has_devcontainer | nein |
| has_linter_config | ja |
| typecheck_configs | — |
| agent_commit_share | 0,01 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0,01 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Pinned-Dependencies. Die verbleibenden Gewichte wurden renormalisiert.
AI-Code-Lesbarkeit für Modelle
55Mittel
Wie die Bewertung erfolgt
| 0/45 | Typprüfbarer Code — PHP ohne Typprüfungs-Konfiguration |
| 55/55 | Handhabbare Dateigrößen — 0/94 Quelldateien über 60 KB |
Verwendete Eingangsdaten
| primary_language | PHP |
| largest_source_bytes | 54.674 |
| source_files_sampled | 94 |
| oversized_source_files | 0 |
Eckdaten
51GitHub-Sterne
22Mitwirkende
67Commits, letzte 12 Monate
0Tage seit letztem Push
43Releases
1Bus-Faktor
0offene Issues
npm, PackagistPaket-Ökosysteme
Warnungen zur Datenerhebung
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 30 ⇿
0Sterne
30Forks
36Releases
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Major 3Minor 12Patch 18
Jeder Punkt umfasst 10 Tage.
OpenSSF Scorecard 5.0 / 10
5.0Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 1 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 13 out of 13 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/29 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 6 contributing companies or organizations |
| k. A. | Dangerous-Workflow | no workflows found |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| k. A. | Packaging | packaging workflow not detected |
| k. A. | Pinned-Dependencies | no dependencies found |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| k. A. | Signed-Releases | no releases found |
| k. A. | Token-Permissions | No tokens found |
| 6 | Vulnerabilities | 4 existing vulnerabilities detected |
Direkte Abhängigkeiten 1
| Registry | Paket | Versionsvorgabe | Manifest |
|---|---|---|---|
| Packagist | cakephp/cakephp | ^5.1.1 | composer.json |
Alle Abhängigkeiten 189
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 1 direkte und 188 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
| Registry | Paket | Version | Beziehung |
|---|---|---|---|
| Packagist | cakephp/cakephp | — | direkt |
| npm | @algolia/abtesting | 1.18.1 | indirekt |
| npm | @algolia/autocomplete-core | 1.17.7 | indirekt |
| npm | @algolia/autocomplete-plugin-algolia-insights | 1.17.7 | indirekt |
| npm | @algolia/autocomplete-preset-algolia | 1.17.7 | indirekt |
| npm | @algolia/autocomplete-shared | 1.17.7 | indirekt |
| npm | @algolia/client-abtesting | 5.52.1 | indirekt |
| npm | @algolia/client-analytics | 5.52.1 | indirekt |
| npm | @algolia/client-common | 5.52.1 | indirekt |
| npm | @algolia/client-insights | 5.52.1 | indirekt |
| npm | @algolia/client-personalization | 5.52.1 | indirekt |
| npm | @algolia/client-query-suggestions | 5.52.1 | indirekt |
| npm | @algolia/client-search | 5.52.1 | indirekt |
| npm | @algolia/ingestion | 1.52.1 | indirekt |
| npm | @algolia/monitoring | 1.52.1 | indirekt |
| npm | @algolia/recommend | 5.52.1 | indirekt |
| npm | @algolia/requester-browser-xhr | 5.52.1 | indirekt |
| npm | @algolia/requester-fetch | 5.52.1 | indirekt |
| npm | @algolia/requester-node-http | 5.52.1 | indirekt |
| npm | @babel/helper-string-parser | 7.27.1 | indirekt |
| npm | @babel/helper-validator-identifier | 7.28.5 | indirekt |
| npm | @babel/parser | 7.29.3 | indirekt |
| npm | @babel/types | 7.29.0 | indirekt |
| npm | @docsearch/css | 3.8.2 | indirekt |
| npm | @docsearch/js | 3.8.2 | indirekt |
| npm | @docsearch/react | 3.8.2 | indirekt |
| npm | @esbuild/aix-ppc64 | 0.21.5 | indirekt |
| npm | @esbuild/android-arm | 0.21.5 | indirekt |
| npm | @esbuild/android-arm64 | 0.21.5 | indirekt |
| npm | @esbuild/android-x64 | 0.21.5 | indirekt |
| npm | @esbuild/darwin-arm64 | 0.21.5 | indirekt |
| npm | @esbuild/darwin-x64 | 0.21.5 | indirekt |
| npm | @esbuild/freebsd-arm64 | 0.21.5 | indirekt |
| npm | @esbuild/freebsd-x64 | 0.21.5 | indirekt |
| npm | @esbuild/linux-arm | 0.21.5 | indirekt |
| npm | @esbuild/linux-arm64 | 0.21.5 | indirekt |
| npm | @esbuild/linux-ia32 | 0.21.5 | indirekt |
| npm | @esbuild/linux-loong64 | 0.21.5 | indirekt |
| npm | @esbuild/linux-mips64el | 0.21.5 | indirekt |
| npm | @esbuild/linux-ppc64 | 0.21.5 | indirekt |
| npm | @esbuild/linux-riscv64 | 0.21.5 | indirekt |
| npm | @esbuild/linux-s390x | 0.21.5 | indirekt |
| npm | @esbuild/linux-x64 | 0.21.5 | indirekt |
| npm | @esbuild/netbsd-x64 | 0.21.5 | indirekt |
| npm | @esbuild/openbsd-x64 | 0.21.5 | indirekt |
| npm | @esbuild/sunos-x64 | 0.21.5 | indirekt |
| npm | @esbuild/win32-arm64 | 0.21.5 | indirekt |
| npm | @esbuild/win32-ia32 | 0.21.5 | indirekt |
| npm | @esbuild/win32-x64 | 0.21.5 | indirekt |
| npm | @iconify-json/simple-icons | 1.2.83 | indirekt |
| npm | @iconify/types | 2.0.0 | indirekt |
| npm | @jridgewell/sourcemap-codec | 1.5.5 | indirekt |
| npm | @rollup/rollup-android-arm-eabi | 4.60.4 | indirekt |
| npm | @rollup/rollup-android-arm64 | 4.60.4 | indirekt |
| npm | @rollup/rollup-darwin-arm64 | 4.60.4 | indirekt |
| npm | @rollup/rollup-darwin-x64 | 4.60.4 | indirekt |
| npm | @rollup/rollup-freebsd-arm64 | 4.60.4 | indirekt |
| npm | @rollup/rollup-freebsd-x64 | 4.60.4 | indirekt |
| npm | @rollup/rollup-linux-arm-gnueabihf | 4.60.4 | indirekt |
| npm | @rollup/rollup-linux-arm-musleabihf | 4.60.4 | indirekt |
| npm | @rollup/rollup-linux-arm64-gnu | 4.60.4 | indirekt |
| npm | @rollup/rollup-linux-arm64-musl | 4.60.4 | indirekt |
| npm | @rollup/rollup-linux-loong64-gnu | 4.60.4 | indirekt |
| npm | @rollup/rollup-linux-loong64-musl | 4.60.4 | indirekt |
| npm | @rollup/rollup-linux-ppc64-gnu | 4.60.4 | indirekt |
| npm | @rollup/rollup-linux-ppc64-musl | 4.60.4 | indirekt |
| npm | @rollup/rollup-linux-riscv64-gnu | 4.60.4 | indirekt |
| npm | @rollup/rollup-linux-riscv64-musl | 4.60.4 | indirekt |
| npm | @rollup/rollup-linux-s390x-gnu | 4.60.4 | indirekt |
| npm | @rollup/rollup-linux-x64-gnu | 4.60.4 | indirekt |
| npm | @rollup/rollup-linux-x64-musl | 4.60.4 | indirekt |
| npm | @rollup/rollup-openbsd-x64 | 4.60.4 | indirekt |
| npm | @rollup/rollup-openharmony-arm64 | 4.60.4 | indirekt |
| npm | @rollup/rollup-win32-arm64-msvc | 4.60.4 | indirekt |
| npm | @rollup/rollup-win32-ia32-msvc | 4.60.4 | indirekt |
| npm | @rollup/rollup-win32-x64-gnu | 4.60.4 | indirekt |
| npm | @rollup/rollup-win32-x64-msvc | 4.60.4 | indirekt |
| npm | @shikijs/core | 2.5.0 | indirekt |
| npm | @shikijs/engine-javascript | 2.5.0 | indirekt |
| npm | @shikijs/engine-oniguruma | 2.5.0 | indirekt |
| npm | @shikijs/langs | 2.5.0 | indirekt |
| npm | @shikijs/themes | 2.5.0 | indirekt |
| npm | @shikijs/transformers | 2.5.0 | indirekt |
| npm | @shikijs/types | 2.5.0 | indirekt |
| npm | @shikijs/vscode-textmate | 10.0.2 | indirekt |
| npm | @types/estree | 1.0.8 | indirekt |
| npm | @types/hast | 3.0.4 | indirekt |
| npm | @types/linkify-it | 5.0.0 | indirekt |
| npm | @types/markdown-it | 14.1.2 | indirekt |
| npm | @types/mdast | 4.0.4 | indirekt |
| npm | @types/mdurl | 2.0.0 | indirekt |
| npm | @types/unist | 3.0.3 | indirekt |
| npm | @types/web-bluetooth | 0.0.21 | indirekt |
| npm | @ungap/structured-clone | 1.3.1 | indirekt |
| npm | @vitejs/plugin-vue | 5.2.4 | indirekt |
| npm | @vue/compiler-core | 3.5.34 | indirekt |
| npm | @vue/compiler-dom | 3.5.34 | indirekt |
| npm | @vue/compiler-sfc | 3.5.34 | indirekt |
| npm | @vue/compiler-ssr | 3.5.34 | indirekt |
| npm | @vue/devtools-api | 7.7.9 | indirekt |
| npm | @vue/devtools-kit | 7.7.9 | indirekt |
| npm | @vue/devtools-shared | 7.7.9 | indirekt |
| npm | @vue/reactivity | 3.5.34 | indirekt |
| npm | @vue/runtime-core | 3.5.34 | indirekt |
| npm | @vue/runtime-dom | 3.5.34 | indirekt |
| npm | @vue/server-renderer | 3.5.34 | indirekt |
| npm | @vue/shared | 3.5.34 | indirekt |
| npm | @vueuse/core | 12.8.2 | indirekt |
| npm | @vueuse/integrations | 12.8.2 | indirekt |
| npm | @vueuse/metadata | 12.8.2 | indirekt |
| npm | @vueuse/shared | 12.8.2 | indirekt |
| npm | algoliasearch | 5.52.1 | indirekt |
| npm | birpc | 2.9.0 | indirekt |
| npm | ccount | 2.0.1 | indirekt |
| npm | character-entities-html4 | 2.1.0 | indirekt |
| npm | character-entities-legacy | 3.0.0 | indirekt |
| npm | comma-separated-tokens | 2.0.3 | indirekt |
| npm | copy-anything | 4.0.5 | indirekt |
| npm | csstype | 3.2.3 | indirekt |
| npm | dequal | 2.0.3 | indirekt |
| npm | devlop | 1.1.0 | indirekt |
| npm | emoji-regex-xs | 1.0.0 | indirekt |
| npm | entities | 7.0.1 | indirekt |
| npm | esbuild | 0.21.5 | indirekt |
| npm | estree-walker | 2.0.2 | indirekt |
| npm | focus-trap | 7.8.0 | indirekt |
| npm | fsevents | 2.3.3 | indirekt |
| npm | hast-util-to-html | 9.0.5 | indirekt |
| npm | hast-util-whitespace | 3.0.0 | indirekt |
| npm | hookable | 5.5.3 | indirekt |
| npm | html-void-elements | 3.0.0 | indirekt |
| npm | is-what | 5.5.0 | indirekt |
| npm | magic-string | 0.30.21 | indirekt |
| npm | mark.js | 8.11.1 | indirekt |
| npm | mdast-util-to-hast | 13.2.1 | indirekt |
| npm | micromark-util-character | 2.1.1 | indirekt |
| npm | micromark-util-encode | 2.0.1 | indirekt |
| npm | micromark-util-sanitize-uri | 2.0.1 | indirekt |
| npm | micromark-util-symbol | 2.0.1 | indirekt |
| npm | micromark-util-types | 2.0.2 | indirekt |
| npm | minisearch | 7.2.0 | indirekt |
| npm | mitt | 3.0.1 | indirekt |
| npm | nanoid | 3.3.16 | indirekt |
| npm | oniguruma-to-es | 3.1.1 | indirekt |
| npm | perfect-debounce | 1.0.0 | indirekt |
| npm | picocolors | 1.1.1 | indirekt |
| npm | postcss | 8.5.25 | indirekt |
| npm | preact | 10.29.2 | indirekt |
| npm | property-information | 7.1.0 | indirekt |
| npm | regex | 6.1.0 | indirekt |
| npm | regex-recursion | 6.0.2 | indirekt |
| npm | regex-utilities | 2.3.0 | indirekt |
| npm | rfdc | 1.4.1 | indirekt |
| npm | rollup | 4.60.4 | indirekt |
| npm | search-insights | 2.17.3 | indirekt |
| npm | shiki | 2.5.0 | indirekt |
| npm | source-map-js | 1.2.1 | indirekt |
| npm | space-separated-tokens | 2.0.2 | indirekt |
| npm | speakingurl | 14.0.1 | indirekt |
| npm | stringify-entities | 4.0.4 | indirekt |
| npm | superjson | 2.2.6 | indirekt |
| npm | tabbable | 6.4.0 | indirekt |
| npm | trim-lines | 3.0.1 | indirekt |
| npm | unist-util-is | 6.0.1 | indirekt |
| npm | unist-util-position | 5.0.0 | indirekt |
| npm | unist-util-stringify-position | 4.0.0 | indirekt |
| npm | unist-util-visit | 5.1.0 | indirekt |
| npm | unist-util-visit-parents | 6.0.2 | indirekt |
| npm | vfile | 6.0.3 | indirekt |
| npm | vfile-message | 4.0.3 | indirekt |
| npm | vite | 5.4.21 | indirekt |
| npm | vitepress | 1.6.4 | indirekt |
| npm | vue | 3.5.34 | indirekt |
| npm | zwitch | 2.0.4 | indirekt |
| Packagist | dereuromark/cakephp-tools | — | indirekt |
| Packagist | ext-intl | — | indirekt |
| Packagist | ext-json | — | indirekt |
| Packagist | fig-r/psr2r-sniffer | — | indirekt |
| Packagist | geocoder-php/common-http | — | indirekt |
| Packagist | geocoder-php/google-maps-provider | — | indirekt |
| Packagist | geocoder-php/nominatim-provider | — | indirekt |
| Packagist | geocoder-php/provider-implementation | — | indirekt |
| Packagist | php | — | indirekt |
| Packagist | php-http/discovery | — | indirekt |
| Packagist | php-http/message | — | indirekt |
| Packagist | phpunit/phpunit | — | indirekt |
| Packagist | psr/http-message | 1.0.0 | indirekt |
| Packagist | symfony/http-client | — | indirekt |
| Packagist | willdurand/geocoder | — | indirekt |
Abhängigkeits-Advisories 2
Dieses Repository veröffentlicht kein vom Index auflösbares Paket, daher wurde sein eigener Abhängigkeitsgraph bewertet – 174 Pakete, darunter auch Entwicklungs- und Test-Pins, die nie ausgeliefert werden: 2 tragen bekannte Advisories, davon 0 direkte. 15 konnten nicht bewertet werden – keine aufgelöste Version, ein nicht unterstütztes Ökosystem, oder außerhalb der ausgewiesenen Paketliste.
| Paket | Version | Beziehung | Schweregrad | Advisories | Behoben in |
|---|---|---|---|---|---|
| vite | 5.4.21 | indirekt | hoch | 3 | 8.0.16 |
| esbuild | 0.21.5 | indirekt | mittel | 1 | 0.25.0 |
Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"cakephp",
"cakephp-plugin",
"php",
"geocoder-provider",
"geocoding",
"geocoder"
],
"is_fork": false,
"size_kb": 6822,
"has_wiki": true,
"homepage": "https://dereuromark.github.io/cakephp-geo/",
"languages": {
"PHP": 386231
},
"pushed_at": "2026-08-02T09:42:21Z",
"created_at": "2014-09-19T16:57:00Z",
"owner_type": "User",
"updated_at": "2026-08-02T09:42:25Z",
"description": "A CakePHP plugin around geocoding tools and helpers.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": "https://www.dereuromark.de/",
"name": "Mark Scherer",
"type": "User",
"login": "dereuromark",
"company": "Available as (Cake)PHP expert",
"location": "Berlin",
"followers": 748,
"avatar_url": "https://avatars.githubusercontent.com/u/39854?v=4",
"created_at": "2008-12-11T16:33:44Z",
"is_verified": null,
"public_repos": 123,
"account_age_days": 6442
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "3.8.0",
"kind": "minor",
"published_at": "2026-05-05T01:50:26Z"
},
{
"tag": "3.7.0",
"kind": "minor",
"published_at": "2026-01-25T11:04:17Z"
},
{
"tag": "3.6.1",
"kind": "patch",
"published_at": "2026-01-12T02:34:32Z"
},
{
"tag": "3.6.0",
"kind": "minor",
"published_at": "2025-11-24T22:27:23Z"
},
{
"tag": "3.5.2",
"kind": "patch",
"published_at": "2025-11-10T12:04:53Z"
},
{
"tag": "3.5.1",
"kind": "patch",
"published_at": "2025-08-08T18:54:01Z"
},
{
"tag": "3.5.0",
"kind": "minor",
"published_at": "2025-03-10T01:28:35Z"
},
{
"tag": "3.4.2",
"kind": "patch",
"published_at": "2024-08-06T15:09:05Z"
},
{
"tag": "3.4.1",
"kind": "patch",
"published_at": "2024-03-30T04:16:55Z"
},
{
"tag": "3.4.0",
"kind": "minor",
"published_at": "2024-02-29T04:54:17Z"
},
{
"tag": "3.3.0",
"kind": "minor",
"published_at": "2024-02-26T03:25:35Z"
},
{
"tag": "2.3.0",
"kind": "minor",
"published_at": "2024-02-08T11:40:10Z"
},
{
"tag": "3.2.0",
"kind": "minor",
"published_at": "2024-01-07T00:30:45Z"
},
{
"tag": "3.1.1",
"kind": "patch",
"published_at": "2023-12-05T19:12:51Z"
},
{
"tag": "3.1.0",
"kind": "minor",
"published_at": "2023-11-27T20:50:37Z"
},
{
"tag": "3.0.0",
"kind": "major",
"published_at": "2023-11-09T16:43:41Z"
},
{
"tag": "3.0.0-RC",
"kind": "prerelease",
"published_at": "2023-10-03T15:12:25Z"
},
{
"tag": "2.2.1",
"kind": "patch",
"published_at": "2023-10-03T15:11:52Z"
},
{
"tag": "2.2.0",
"kind": "minor",
"published_at": "2022-07-20T14:21:21Z"
},
{
"tag": "2.1.0",
"kind": "minor",
"published_at": "2021-05-29T17:55:35Z"
},
{
"tag": "2.0.1",
"kind": "patch",
"published_at": "2021-04-14T17:48:12Z"
},
{
"tag": "2.0.0",
"kind": "major",
"published_at": "2020-04-18T17:09:11Z"
},
{
"tag": "1.5.1",
"kind": "patch",
"published_at": "2020-04-18T17:06:57Z"
},
{
"tag": "2.0.0-beta",
"kind": "prerelease",
"published_at": "2020-03-25T01:57:54Z"
},
{
"tag": "1.5.0",
"kind": "minor",
"published_at": "2020-02-22T18:45:58Z"
},
{
"tag": "1.4.0",
"kind": "minor",
"published_at": "2019-11-15T18:25:12Z"
},
{
"tag": "1.3.6",
"kind": "patch",
"published_at": "2019-11-01T11:47:32Z"
},
{
"tag": "1.3.5",
"kind": "patch",
"published_at": "2019-09-02T22:40:17Z"
},
{
"tag": "1.3.4",
"kind": "patch",
"published_at": "2019-01-06T13:13:22Z"
},
{
"tag": "1.3.3",
"kind": "patch",
"published_at": "2018-12-26T00:43:27Z"
},
{
"tag": "1.3.2",
"kind": "patch",
"published_at": "2018-10-13T11:20:59Z"
},
{
"tag": "1.3.1",
"kind": "patch",
"published_at": "2018-05-22T17:34:56Z"
},
{
"tag": "1.3.0",
"kind": "minor",
"published_at": "2018-04-19T10:33:04Z"
},
{
"tag": "1.2.3",
"kind": "patch",
"published_at": "2017-11-13T23:24:14Z"
},
{
"tag": "1.2.2",
"kind": "patch",
"published_at": "2017-09-04T12:19:59Z"
},
{
"tag": "1.2.1",
"kind": "patch",
"published_at": "2017-07-19T21:10:07Z"
},
{
"tag": "1.2.0",
"kind": "minor",
"published_at": "2017-05-08T19:15:59Z"
},
{
"tag": "1.1.1",
"kind": "patch",
"published_at": "2017-03-06T14:37:29Z"
},
{
"tag": "1.1.0",
"kind": "minor",
"published_at": "2017-03-03T20:47:05Z"
},
{
"tag": "1.0.2",
"kind": "patch",
"published_at": "2017-01-23T14:45:20Z"
},
{
"tag": "1.0.1",
"kind": "patch",
"published_at": "2017-01-14T14:00:18Z"
},
{
"tag": "1.0.0",
"kind": "major",
"published_at": "2016-08-09T09:37:58Z"
},
{
"tag": "0.1",
"kind": "other",
"published_at": "2016-04-10T21:05:59Z"
}
],
"recent_commits": [
{
"oid": "28b4dfc0e41e7961d3f83a2073f1b2b9adeb31b4",
"body": "Bumps [postcss](https://github.com/postcss/postcss) from 8.5.15 to 8.5.25.\n- [Release notes](https://github.com/postcss/postcss/releases)\n- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/postcss/postcss/compare/8.5.15...8.5.25)\n\n---\nupdated-depe\n[…]\nss\n dependency-version: 8.5.25\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump postcss from 8.5.15 to 8.5.25 in /docs (#105)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-08-02T09:42:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "01e5bd580ca3179c97e6dc0d296a51f1930426de",
"body": null,
"is_bot": false,
"headline": "Fix PHPStan on CakePHP 5.4",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-06-28T10:53:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c493f5323a5caafe88c8894883192037b6db4d18",
"body": "actions/cache@v1-v4 declare Node 20, which GitHub now deprecates and\nforce-runs on Node 24. v5 is Node 24 native and removes the warning.",
"is_bot": false,
"headline": "CI: bump actions/cache to v5 (Node 24)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-06-28T09:41:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74c1da1e1974472977d23502830f9dc9aa7d66e9",
"body": "Newer phpstan (2.2.x, as installed by CI) flagged two issues:\n- GoogleMapHelper::icon(): `if ($path)` was always true since $path is a\n non-empty string in both branches; call getimagesize() directly.\n- StaticMapHelper::markers(): chr(65 + $index) could exceed the valid\n 0-255 codepoint range; wrap the auto-label with `% 26` so it cycles A-Z.",
"is_bot": false,
"headline": "Fix CI: phpstan constant-condition and chr() range errors",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-06-28T09:28:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8e6834c790917fc78c3a33520d4daecddd96ec0",
"body": "Reorder union type hints to match the docblocks and satisfy\nPhpCollective's IncorrectNativeFormat sniff (class types first,\nthen array, string, scalars, null last).",
"is_bot": false,
"headline": "Fix native union type order",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-06-02T00:55:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4c34789bc9ffe4bf885ddd9eb8b0bf41a124839",
"body": null,
"is_bot": false,
"headline": "Allow symfony http-client v8 (#103)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-05-25T19:33:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a80be277b2299cad251e1dc8b10ad498f5c7e82",
"body": "* Apply conservative Rector cleanup\n\n* Run PHPCS cleanup\n\n* Fix geocoder test reflection access\n\n* Restore compact() for matching view vars\n\n* Tighten identifier validation\n\n* Fix cleanup branch regressions",
"is_bot": false,
"headline": "Apply conservative Rector cleanup (#102)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-05-25T12:15:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78146458d5f6a5e489d15a740dc1edb252474914",
"body": "Point readers to https://toolbox.dereuromark.de/dbml so they can convert this\nDBML snapshot into the migration or raw SQL they need for their own app.",
"is_bot": false,
"headline": "Link the DBML converter in the schema snapshot",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-05-23T15:54:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e00514ab3d1b89d92af7bb70289dfe28eb33b24c",
"body": "Hand-maintained DBML snapshot of the plugin's migration schema under\nresources/schema/schema.dbml — paste into dbdiagram.io to view/diagram.\nMirrors the snapshot already shipped by cakephp-workflow.",
"is_bot": false,
"headline": "Add DBML database schema snapshot",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-05-23T12:54:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11eb44acdd1302b8dc0ffe1dfd37927e0edd2279",
"body": null,
"is_bot": false,
"headline": "Add .github/CONTRIBUTING.md",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-05-22T18:51:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef0621bad946784ee0f6209cf29b734547c8492e",
"body": "Restructure the docs into a VitePress site grouped into Guide, Behavior,\nGeocoding Libraries, Geometry, Helpers, and Model sections. Convert the\nold capitalized files into kebab-case pages, fix internal links to\nextensionless VitePress links, and add a deploy workflow for GitHub Pages.\n\nPoint the composer homepage and README at the published site.",
"is_bot": false,
"headline": "Add VitePress documentation site (#101)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-05-21T16:25:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b7e9fc15fd8ba3200c45053fba638740f24dd17",
"body": "* Fix distance math and geocoder cache misses\n\n* Fix mysql spatial query assertions",
"is_bot": false,
"headline": "Fix spatial geocoding edge cases and cache misses (#100)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-05-11T12:09:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80f36638f1c2cc326a3c63079e9a09b3d62b9c8a",
"body": "* Add GeoJSON geometry value objects for Leaflet\n\n* Fix GeoJSON helper CI issues",
"is_bot": false,
"headline": "Add GeoJSON geometry value objects for Leaflet (#99)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-05-10T11:50:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c35fae62b5fe3a4d973f35fba6d34e70533b8c4b",
"body": null,
"is_bot": false,
"headline": "Fix CS.",
"author_name": "Mark",
"author_login": "dereuromark",
"committed_at": "2026-05-09T18:47:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9006700e2f738c0127ef7ad49948fbe3534f6991",
"body": "Convert __() calls in src/ and templates/ to __d('geo', ...) so user-facing\nstrings live in their own translation domain instead of leaking into the host\napp's default domain. Also re-route the pre-existing __d('tools', ...) calls\nin the pagination element and GoogleMapHelper alt-text — they were le\n[…]\nopied from cakephp-tools — to __d('geo', ...) so the\nplugin owns its strings.\n\nAdd resources/locales/geo.pot generated via cake i18n extract so translators\nhave a stable POT to base language files on.",
"is_bot": false,
"headline": "Use plugin-specific i18n domain for translations (#98)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-05-04T01:20:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b1c446c540db529f9b23cf971d7447e0b53976ce",
"body": "Stop embedding the raw provider API key in the RuntimeException\nthrown when a geocoding provider returns InvalidServerResponse;\nthe message now shows only the last four characters with a fixed\nprefix so the credential cannot leak via logs or error reporters.\n\nEscape user-controllable values written \n[…]\nstrings.\n- addMarker() now coerces lat/lng to float and uses sprintf('%F')\n for locale-safe interpolation, and JSON-encodes the address\n string so a quoted payload cannot break out of the inline JS.",
"is_bot": false,
"headline": "Sanitize API key in exception, harden helper output (#97)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-05-02T14:10:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "20d0a6067c8e5ba6e665f86b986aae1692f1b92b",
"body": null,
"is_bot": false,
"headline": "Adjust CS badge",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-04-28T16:58:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cff6f521b3b32a652b14173c38232970b9abdfa5",
"body": "- Add nonce attribute to new inline <script> blocks in admin templates\n- Replace postLink+confirm with postButton+data-confirm-message to\n eliminate inline onclick handlers that CSP blocks without\n unsafe-inline / unsafe-hashes\n- A delegated submit listener in each template replicates the\n confirmation UX, so behavior is unchanged\n\nThis lets the admin UI work under a strict script-src CSP\n(e.g. \"script-src 'self' 'nonce-X'\") without needing\n'unsafe-inline' or 'unsafe-hashes'.",
"is_bot": false,
"headline": "Refactor admin UI to be CSP-compatible (#96)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-04-22T23:47:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "543dd890ac63a4802e1aa680d63c1d01b4f23a23",
"body": null,
"is_bot": false,
"headline": "Fix CS.",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-04-17T17:30:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d92ab791a1c47041d796290ce70ae67f18a9b6a1",
"body": "- Use Cake\\Http\\Client directly (PSR-18 compatible) instead of deprecated php-http/cakephp-adapter\n- Add missing imports for Coordinates and GeoCoordinate value object classes\n- Fix Search plugin callback return types (must return bool)\n- Add required imports for SelectQuery and TableRegistry",
"is_bot": false,
"headline": "Fix documentation issues (#95)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-04-02T12:21:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c6000e1972cda1d94fc71c4d9bb082928799241",
"body": "- Update CakePHP 3.x documentation links to 5.x\n- Update layout.ctp reference to layout.php",
"is_bot": false,
"headline": "Fix outdated documentation references (#94)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-04-02T11:17:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08dabb7c6cb6c757a49d1a5ee5c0c5102a66018c",
"body": null,
"is_bot": false,
"headline": "Enable phpcs cache for faster subsequent runs",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-03-15T15:35:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc5707c1b67746d041d1dd53545bcc6c49ed0f81",
"body": null,
"is_bot": false,
"headline": "Improve composer.json metadata",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-03-13T14:51:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af250b4cebc52cac12e2972ef7110360ac246701",
"body": null,
"is_bot": false,
"headline": "Add admin-panel keyword",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-03-13T14:44:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0292aeb3b638f932a5125a29ab10778ddc568e95",
"body": null,
"is_bot": false,
"headline": "Allow PHPUnit 13",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-02-06T23:53:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f2d6edf44d1017ecf1eea3e1b5c38425875fd91",
"body": null,
"is_bot": false,
"headline": "Raise PHP Min Version",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-01-28T05:02:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e5c4216b926e40db918d32edf0a03ceb31463d7",
"body": "- GeoCoordinate: comprehensive tests for all methods\n- Calculator: exception paths, GeoCoordinate support, blur with level 0\n- GeoCalculator: empty array exception path\n- GeoapifyProvider: named colors, hex colors, invalid size, marker options",
"is_bot": false,
"headline": "Add more tests for improved coverage",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T08:30:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7577ebef32b9c50fa146adc9d88767284e762a6",
"body": null,
"is_bot": false,
"headline": "Add comprehensive tests for GeoCoordinate class",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T08:26:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32a173f57b0b45c9877a2d9ce0913bc66ea056f2",
"body": null,
"is_bot": false,
"headline": "Fix codecov badge link in README.md",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T07:54:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1a5d675997398e4324f0f62dcc665c587516fea",
"body": "* Modernize JsBaseEngineTrait escape method and add tests\n\n- Replace manual _utf8ToHex() with json_encode() for escape()\n- Remove unused _utf8ToHex(), utf8(), and _toQuerystring() methods\n- Add comprehensive test coverage for JsBaseEngineTrait\n\n* Remove unused methods and properties from JsBaseEngin\n[…]\nnd escape() are actually used by GoogleMapHelper.\nUpdated tests to match remaining functionality.\n\n* Fix phpcs: use anonymous class for trait testing\n\n* Fix phpcs: import ArrayObject via use statement",
"is_bot": false,
"headline": "Modernize escape method (#92)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T07:53:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "712609467322ab70a717d6ca5126dc40202d8189",
"body": "* Fix script loading order for marker clustering\n\nAdd polling mechanism to wait for markercluster library to load\nbefore initializing map with clustering. This fixes \"L.markerClusterGroup\nis not a function\" error when CDN script loads asynchronously.\n\n* Fix coding standards (tabs vs spaces)\n\n* Fix markercluster script inclusion for subsequent maps\n\nCheck _apiIncluded instead of current map's autoScript setting,\nso clustering scripts are included when any map had autoScript enabled.",
"is_bot": false,
"headline": "Add marker clustering support to LeafletHelper (#91)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T07:39:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cf4a4e32daeae81fedcdf904601f7ae7a0dfb60",
"body": "- Test all allowed classes (DateTime, DateTimeImmutable, DateTimeZone, DateInterval, Date, stdClass)\n- Test that disallowed classes result in __PHP_Incomplete_Class to prevent object injection attacks\n- Add tests for marshal null handling and string deserialization",
"is_bot": false,
"headline": "Add tests for ObjectType allowed classes security feature",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T07:31:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13621085d4426bdd131d9f2e4b604283f08bc801",
"body": "…r tests\n\n- Add CachedLocationTest with tests for serialization round-trips\n- Add GeoIpAddressTest for withHost() method\n- Update GeoapifyProviderTest for autoCalculateBounds behavior\n- Resolve merge conflict in GeoapifyProvider",
"is_bot": false,
"headline": "Add tests for CachedLocation and GeoIpAddress, update GeoapifyProvide…",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T07:24:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8716d60d3cfb2eeea375a8afbbac7a0a9aaff1db",
"body": "- Add enableClustering() method to group nearby markers\n- Auto-include Leaflet.markercluster plugin when autoScript is enabled\n- Markers added after enableClustering() are added to cluster group\n- Supports cluster options like showCoverageOnHover, maxClusterRadius",
"is_bot": false,
"headline": "Add marker clustering support to LeafletHelper (#90)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T07:18:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a64b7b114cbb62bf6186ed4c2346b85181d5962a",
"body": "* Add automatic center and zoom calculation from markers/paths\n\nWhen lat/lng or zoom are not explicitly provided, the provider now\nautomatically calculates them from the markers and path points:\n\n- calculateBounds(): finds bounding box of all points\n- calculateCenter(): determines midpoint of boundi\n[…]\n CS: add array type to doc block shapes\n\n* Make zoom calculation more conservative\n\n- Increase default padding from 20 to 40 pixels\n- Subtract 1 from calculated zoom to ensure content fits with margin",
"is_bot": false,
"headline": "Add automatic center and zoom calculation from markers/paths (#89)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T06:53:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dcf4d684f1069d17030fa89e155e3fcc449a45cb",
"body": null,
"is_bot": false,
"headline": "Add more tests.",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T05:42:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d2b6db8d7cd86eb9da839fd89384ac849612f23",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master'",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T05:33:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11fd52bc769835a221bd0ac486ab318f51613129",
"body": null,
"is_bot": false,
"headline": "Add more tests.",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T05:32:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c979581c9b9e9c9bcf1194917d77c451ff79b179",
"body": "Stadia Maps static API expects markers as separate m= query parameters\nwith lat,lng,style format (not markers= with pipe separators).\n\nExample: m=48.2082,16.3738,marker-ff0000&m=47.0707,15.4395,marker-0000ff",
"is_bot": false,
"headline": "Fix Stadia marker format to use multiple m= parameters (#88)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T04:49:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c35225a9054281ec7a99092ee61194ce2f1cdd3",
"body": "URL-encode special characters that cause 400 Bad Request errors:\n- # (hash) in colors -> %23\n- | (pipe) as separator -> %7C\n\nWithout encoding, Geoapify API returns:\n\"marker[0][1]\" does not match any of the allowed types",
"is_bot": false,
"headline": "Fix Geoapify URL encoding for markers and paths (#87)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T04:39:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce75d96c6aa06565feff857683c859e2bc4456d9",
"body": "* Add ChainProvider for fallback geocoding support\n\nAllows configuring multiple geocoding providers with automatic fallback.\nIf a provider fails due to rate limiting (QuotaExceeded) or server errors\n(InvalidServerResponse), the next provider in the chain is tried.\n\nUsage:\n'Geocoder' => [\n 'provid\n[…]\n_NOMINATIM,\n ],\n],\n\n* Add validation for conflicting provider/providers config\n\nThrows RuntimeException when both 'provider' and 'providers' keys\nare configured, preventing ambiguous configuration.",
"is_bot": false,
"headline": "Add ChainProvider for fallback geocoding support (#86)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T03:49:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "551f644ae17b1631b5ebf9d2aebbf390f1210055",
"body": null,
"is_bot": false,
"headline": "Expand example config with all plugin configuration options (#85)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T03:31:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f873ee08e8d8657f74c74e61f5f7c8cdab8adef9",
"body": "* Add provider-based engine architecture to Geocoder\n\nRefactor the Geocoder class to use a provider-based engine architecture,\nsimilar to StaticMapHelper. This allows easy switching between geocoding\nproviders via configuration.\n\nNew providers:\n- GoogleProvider: Wraps geocoder-php/google-maps-provid\n[…]\ng keys\n- Full backward compatibility with callable providers\n\n* Improve documentation: remove redundant column and use constants in examples\n\n* Add example configuration file with all Geocoder options",
"is_bot": false,
"headline": "Add provider-based engine architecture to Geocoder (#84)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T03:25:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4330b8c51aeb46c68f45a3d7df79275b65de6bed",
"body": null,
"is_bot": false,
"headline": "Add StaticMapHelper to documentation index",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-01-25T02:29:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72ea9884970db4e98b201fa368f6059d66ae0061",
"body": "* Add StaticMapHelper with multi-provider support\n\nIntroduces a new StaticMapHelper for generating static map images\nwith support for multiple providers:\n- Geoapify\n- Mapbox\n- Stadia Maps\n- Google Maps\n\nFeatures:\n- Unified API across all providers\n- Support for markers and paths\n- Configurable via C\n[…]\nnd documentation.\n\n* Add provider constants to StaticMapHelper\n\nUse PROVIDER_* constants instead of magic strings for better\nIDE autocompletion and to prevent typos.\n\n* Simplify provider table in docs",
"is_bot": false,
"headline": "Add StaticMapHelper with multi-provider support (#83)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-24T18:12:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "03543d848d6e458bd79a1e5cd046571de9a3243e",
"body": null,
"is_bot": false,
"headline": "Clarify tile layer usage: tileLayer option vs addTileLayer(). (#82)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-24T10:33:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c98c736047835d3b2a2016a041bde42a1336209",
"body": null,
"is_bot": false,
"headline": "Add Leaflet tile providers documentation",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-01-24T10:13:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f633251e733bbd4250fa0d1eca0a45f947b9e518",
"body": null,
"is_bot": false,
"headline": "Add NullProvider mention to README",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-01-24T09:51:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eac17ff4a6f7e8307303c3e8cfb7e81a6a9912d6",
"body": null,
"is_bot": false,
"headline": "Update README to mention Leaflet maps support",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2026-01-24T09:49:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2204d56a57819764db6d0164f6a337c9a8a0d2f",
"body": "- LeafletHelper for rendering interactive maps using Leaflet.js\n- Tile provider presets (OSM, CartoDB Light/Dark)\n- Support for markers, popups, polylines, circles, polygons, GeoJSON\n- Auto-center functionality with fitBounds\n- Multiple maps per page support\n- Full test coverage (27 tests)\n- Documentation with usage examples",
"is_bot": false,
"headline": "Add LeafletHelper as open-source alternative to GoogleMapHelper (#81)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-24T09:46:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59e0f55c7650964a9a94428958c28195bf90fe30",
"body": "* Add timezoneByCoordinates method to Calculator\n\nAdds a static method to find the closest timezone based on\nlatitude/longitude coordinates. Uses PHP's built-in timezone\ndatabase and the existing calculateDistance method to find\nthe geographically closest timezone.\n\nCloses #44\n\n* Add Places Autocomp\n[…]\nmplete inputs\n- Automatically populates hidden lat/lng fields when a place is selected\n- Support for custom field options, autocomplete options, and callbacks\n- Add tests and documentation\n\nCloses #36",
"is_bot": false,
"headline": "Add Places Autocomplete support to GoogleMapHelper (#80)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-24T09:38:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d8fc54abcd707cf59aa0735c72deb6338916853f",
"body": "Adds a static method to find the closest timezone based on\nlatitude/longitude coordinates. Uses PHP's built-in timezone\ndatabase and the existing calculateDistance method to find\nthe geographically closest timezone.\n\nCloses #44",
"is_bot": false,
"headline": "Add timezoneByCoordinates method to Calculator (#79)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-24T09:04:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3005a46a49b997e584dc177947c8432da1ed0b69",
"body": "* Explore spatial support.\n* Use bounding box pre-filter with ST_Within for spatial index usage\n\nThe original findSpatial method only used ST_Distance_Sphere in the\nWHERE clause, which prevents spatial indexes from being used. MySQL/MariaDB\ncan only use spatial indexes with spatial relationship func\n[…]\ntstrap.php\n- Fix empty array spacing in SpatialAddressesFixture\n- Change test to verify query structure (ST_Within, POLYGON) instead of\n relying on EXPLAIN possible_keys which varies by MySQL version",
"is_bot": false,
"headline": "Explore spatial support. (#76)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-24T08:39:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a9ef5966ffeabac7f0cc7a42b1d873a99270a88e",
"body": null,
"is_bot": false,
"headline": "Add NullProvider for testing and document its usage (#78)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-24T04:54:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d269fd92b008680b14a10c9e2ec5d7170818e6b",
"body": "* Fix __PHP_Incomplete_Class error when reading cached geocode data\n\nWhen cached geocode data cannot be properly unserialized (e.g., due to\nmissing class definitions during autoloading), PHP returns an\n__PHP_Incomplete_Class object instead of the expected Geocoder\\Location.\n\nThis caused a TypeError \n[…]\nly PSR-2R coding standard (braces on same line)\n- Remove unused Location import\n- Simplify cache reading logic (no backwards compat for old serialized objects since JSON type won't decode them anyway)",
"is_bot": false,
"headline": "Fix __PHP_Incomplete_Class error when reading cached geocode data (#77)",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2026-01-12T02:33:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3e755f4ecc43973df038c14732429e5ec1b4236f",
"body": null,
"is_bot": false,
"headline": "Fix docs",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-12-21T12:39:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7feeb2385e9e7a495d1f0fc445b1c65ecfe0e5ca",
"body": null,
"is_bot": false,
"headline": "Auto-fix CS - CS master branch",
"author_name": "Mark",
"author_login": "dereuromark",
"committed_at": "2025-12-01T17:27:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c55432ce44c82440741f88e20d0ad269161e1650",
"body": "- Fix unsafe deserialization in ObjectType by whitelisting safe classes\n- Fix path traversal vulnerability in GoogleMapHelper icon method\n- Fix SQL injection in GeocoderBehavior distanceConditions\n- Implement isAccurateEnough() method in Geocoder\n- Add missing type hints to GoogleMapHelper methods\n- Fix type casting in GeoCoordinate::fromString()\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix security vulnerabilities and add type hints",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-11-19T12:52:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "70ae8c143894f4cc0ec6e05261749fa1adb40122",
"body": null,
"is_bot": false,
"headline": "Adjust phpcs config",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-11-17T09:52:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25c04a51a94c7e234b70074f00d05bf1fb954134",
"body": null,
"is_bot": false,
"headline": "Remove deprecations",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-11-10T12:01:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab18b29c59daf72517e751804672ec028d47c135",
"body": null,
"is_bot": false,
"headline": "Remove deprecations",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-11-10T11:49:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d81f9ba967ed6483b4ab8a8435786e17e59b23b",
"body": null,
"is_bot": false,
"headline": "Update CI",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-10-28T04:54:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b210077cbc4994e5171e80c8b93352796311bc73",
"body": null,
"is_bot": false,
"headline": "Auto-fix CS - CS master branch",
"author_name": "Mark",
"author_login": "dereuromark",
"committed_at": "2025-10-25T15:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ab06224325b4c7f33f097604838aa4fd5bbace4",
"body": null,
"is_bot": false,
"headline": "Adjust CI matrix to test 8.5",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-10-25T15:37:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a436bf02e59d64266bc7436484dca557a292c76",
"body": null,
"is_bot": false,
"headline": "Fix up CI",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-10-14T14:26:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27fb98426e2e9b27e17fff6019e731611a409d1f",
"body": null,
"is_bot": false,
"headline": "Fix up for PHPCS v4",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-09-30T13:30:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e716195a0de164d34b3691104c2a50367bc197b",
"body": null,
"is_bot": false,
"headline": "Update CI",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-09-09T10:33:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7dc18e2195eb314b9aee7d600806ebdc49f68ab",
"body": null,
"is_bot": false,
"headline": "Auto-fix CS - CS master branch",
"author_name": "Mark",
"author_login": "dereuromark",
"committed_at": "2025-08-23T10:05:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1d35e27c5a035999819d04ce46d32424a679e04",
"body": null,
"is_bot": false,
"headline": "Adjust migration files.",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-05-25T10:09:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af48a9378997c4602c0b3d1e1478bfa4f8f28860",
"body": null,
"is_bot": false,
"headline": "Remove deprecation usage",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-05-01T11:48:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d1b03f723c0c2c49c2923cb52180bc2c21efce8",
"body": null,
"is_bot": false,
"headline": "Remove deprecation usage",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-05-01T11:43:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5971ddedea59cf945edf116ceb37e0b0b5f83a2c",
"body": null,
"is_bot": false,
"headline": "Remove deprecations",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-05-01T00:56:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "adf75ff9a61b0b979b5d766a48472a68be46297f",
"body": null,
"is_bot": false,
"headline": "Remove deprecations",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-04-30T20:57:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2706ce1380e6d0aed8e991e8fb87256d3634b791",
"body": null,
"is_bot": false,
"headline": "Allow geocoder v5",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-04-30T20:32:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "161fe5cad5cf3f49cfad51cae02ad11f6625b9a1",
"body": null,
"is_bot": false,
"headline": "Fix PHPStan",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-04-21T19:02:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6998cbdf9564c0988707e8589ffde8926b51fcd8",
"body": null,
"is_bot": false,
"headline": "Upgrade to PHPStan 2",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-04-21T18:29:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb2393319676bfcf4e01e7447a461716f2845689",
"body": null,
"is_bot": false,
"headline": "Remove deprecation silencing",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-04-17T19:10:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aab19cb325c1b8df36db0efc2d49aaa5d3fce353",
"body": null,
"is_bot": false,
"headline": "Allow PHPUnit 12",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-04-17T17:41:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af371a01bac1787663b6894f2926d7eb97e11926",
"body": null,
"is_bot": false,
"headline": "Allow PHPUnit 11",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2025-04-17T17:10:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "527378adbb8d7732b750474ccd42a1bf5b19db8a",
"body": null,
"is_bot": false,
"headline": "PHPStan",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-12-19T15:16:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d8ffb769c61a29dd6bdc2df6a2052afa2bb825b",
"body": null,
"is_bot": false,
"headline": "Fix schema default setting",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-11-19T01:31:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce6d4cd29a49628d0c66ce5519cd21f24e922db5",
"body": null,
"is_bot": false,
"headline": "Fix schema default setting",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-11-19T01:24:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80f2e4e6bde7554ea48997acddf061bdc72fcda5",
"body": null,
"is_bot": false,
"headline": "PHPStan updates",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-11-17T19:11:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42d811e1b7aa23636a7d69e71455dffa7e277cce",
"body": null,
"is_bot": false,
"headline": "CI PHP versions",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-11-16T19:07:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb0b1098274d9ca33f9ab4660550ade00d1e1dff",
"body": null,
"is_bot": false,
"headline": "Sync CI script",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-11-16T19:06:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9d464a2995b51516ee9b0ea93ffce395b583d4c",
"body": null,
"is_bot": false,
"headline": "Sync CI script",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-11-16T19:03:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fa33bb399a21c7b22825648e1c6ab12c3902e6e",
"body": null,
"is_bot": false,
"headline": "More clear exception.",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-10-25T10:21:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f5d67b9708310680a316929dafa9d6d3cefcead",
"body": null,
"is_bot": false,
"headline": "Test PHP8.4",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-10-23T13:16:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca1064aa82ad456f7bb3efda7aafe005a59697bd",
"body": null,
"is_bot": false,
"headline": "Fix tests",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-09-16T13:07:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8fa6eb898310ed1836812ce44f4a36340e54f900",
"body": null,
"is_bot": false,
"headline": "Fix deprecations",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-07-18T12:50:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0676d6672cc0a485e7689edfe542d6e574a1ca02",
"body": null,
"is_bot": false,
"headline": "Fix PHPStan",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-06-04T22:41:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36b8688fc7a04e136792d080c0e6981d31d4e480",
"body": null,
"is_bot": false,
"headline": "Fix CI coverage",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-04-19T10:51:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cdf4c3fbf27d9be5e8b43f36d4546f1b45270d83",
"body": null,
"is_bot": false,
"headline": "Fix CS",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-03-31T22:04:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b67110b38e7207ba99c5a1915a714b4a0d056bf",
"body": null,
"is_bot": false,
"headline": "Fix up phpcs version",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-03-29T22:24:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "623175d08b7cb610fd1bea41797ad57b1116a581",
"body": null,
"is_bot": false,
"headline": "Fix up gitattributes",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-03-11T17:00:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e07fa761a868deb9b6e3cf6a397d60c7184d062",
"body": null,
"is_bot": false,
"headline": "Update Geocoder.md",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2024-02-28T18:47:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9913525a20974f73e963734dfe2503d87586e547",
"body": "Add closure support for elements of address",
"is_bot": false,
"headline": "Merge pull request #75 from dereuromark/address-element-closure",
"author_name": "Mark Scherer",
"author_login": "dereuromark",
"committed_at": "2024-02-28T18:21:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cde278c2516e4f8e2db3fe0a2adee699d99a31d0",
"body": null,
"is_bot": false,
"headline": "Add closure support for elements of address",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-02-28T18:18:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d91c76b8f1b5e25e78a2c235330998df2598880a",
"body": null,
"is_bot": false,
"headline": "Coordindate serialize.",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-02-26T03:18:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "840bd2cd21914c47deb50313cb475bf837d3a758",
"body": null,
"is_bot": false,
"headline": "Add central coordinate calc.",
"author_name": "mscherer",
"author_login": "dereuromark",
"committed_at": "2024-02-23T14:28:57Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 43,
"commits_last_year": 67,
"latest_release_at": "2026-05-05T01:50:26Z",
"latest_release_tag": "3.8.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 26,
"days_since_latest_release": 89,
"mean_days_between_releases": 88.4
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 57,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "dereuromark/cakephp-geo",
"exists": true,
"license": "MIT",
"keywords": [
"geocoding",
"helpers",
"plugin",
"google-maps",
"cakephp",
"maps",
"location",
"admin-panel",
"coordinates"
],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/dereuromark/cakephp-geo",
"is_deprecated": false,
"latest_version": "3.8.0",
"repository_url": "https://github.com/dereuromark/cakephp-geo",
"versions_count": 43,
"total_downloads": 189748,
"dependents_count": 4,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2735,
"first_published_at": null,
"latest_published_at": "2026-05-04T01:20:59Z",
"latest_version_yanked": null,
"days_since_latest_publish": 90
}
]
},
"popularity": {
"forks": 30,
"stars": 51,
"watchers": 6,
"fork_history": {
"days": [
{
"date": "2014-09-20",
"count": 1
},
{
"date": "2015-06-02",
"count": 1
},
{
"date": "2015-08-22",
"count": 1
},
{
"date": "2016-01-16",
"count": 1
},
{
"date": "2016-09-21",
"count": 1
},
{
"date": "2016-10-10",
"count": 1
},
{
"date": "2017-01-27",
"count": 1
},
{
"date": "2017-03-15",
"count": 1
},
{
"date": "2017-04-06",
"count": 1
},
{
"date": "2017-05-03",
"count": 1
},
{
"date": "2017-10-19",
"count": 1
},
{
"date": "2017-11-01",
"count": 1
},
{
"date": "2017-11-06",
"count": 1
},
{
"date": "2017-12-20",
"count": 1
},
{
"date": "2018-04-16",
"count": 1
},
{
"date": "2018-05-29",
"count": 1
},
{
"date": "2018-06-19",
"count": 1
},
{
"date": "2018-08-07",
"count": 1
},
{
"date": "2018-10-28",
"count": 1
},
{
"date": "2018-11-25",
"count": 1
},
{
"date": "2019-06-05",
"count": 1
},
{
"date": "2019-11-13",
"count": 1
},
{
"date": "2020-02-27",
"count": 1
},
{
"date": "2021-07-28",
"count": 1
},
{
"date": "2022-04-19",
"count": 1
},
{
"date": "2022-07-14",
"count": 1
},
{
"date": "2023-12-13",
"count": 1
},
{
"date": "2024-02-08",
"count": 1
},
{
"date": "2024-11-18",
"count": 1
},
{
"date": "2025-03-13",
"count": 1
}
],
"complete": true,
"collected": 30,
"total_forks": 30
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 54674,
"source_files_sampled": 94,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json",
"docs/package.json"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "vite",
"direct": false,
"version": "5.4.21",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-4w7w-66w2-5vf9",
"GHSA-fx2h-pf6j-xcff",
"GHSA-v6wh-96g9-6wx3"
],
"fixed_version": "8.0.16",
"advisory_count": 3,
"oldest_advisory_days": 117
},
{
"name": "esbuild",
"direct": false,
"version": "0.21.5",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-67mh-4wv8-2f99"
],
"fixed_version": "0.25.0",
"advisory_count": 1,
"oldest_advisory_days": 537
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 1,
"moderate": 1
},
"advisory_count": 4,
"affected_count": 2,
"assessed_count": 174,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 15,
"direct_affected_count": 0
},
"ecosystems": [
"npm",
"packagist"
],
"dependencies": [
{
"name": "cakephp/cakephp",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^5.1.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "cakephp/cakephp",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "@algolia/abtesting",
"direct": false,
"version": "1.18.1",
"ecosystem": "npm"
},
{
"name": "@algolia/autocomplete-core",
"direct": false,
"version": "1.17.7",
"ecosystem": "npm"
},
{
"name": "@algolia/autocomplete-plugin-algolia-insights",
"direct": false,
"version": "1.17.7",
"ecosystem": "npm"
},
{
"name": "@algolia/autocomplete-preset-algolia",
"direct": false,
"version": "1.17.7",
"ecosystem": "npm"
},
{
"name": "@algolia/autocomplete-shared",
"direct": false,
"version": "1.17.7",
"ecosystem": "npm"
},
{
"name": "@algolia/client-abtesting",
"direct": false,
"version": "5.52.1",
"ecosystem": "npm"
},
{
"name": "@algolia/client-analytics",
"direct": false,
"version": "5.52.1",
"ecosystem": "npm"
},
{
"name": "@algolia/client-common",
"direct": false,
"version": "5.52.1",
"ecosystem": "npm"
},
{
"name": "@algolia/client-insights",
"direct": false,
"version": "5.52.1",
"ecosystem": "npm"
},
{
"name": "@algolia/client-personalization",
"direct": false,
"version": "5.52.1",
"ecosystem": "npm"
},
{
"name": "@algolia/client-query-suggestions",
"direct": false,
"version": "5.52.1",
"ecosystem": "npm"
},
{
"name": "@algolia/client-search",
"direct": false,
"version": "5.52.1",
"ecosystem": "npm"
},
{
"name": "@algolia/ingestion",
"direct": false,
"version": "1.52.1",
"ecosystem": "npm"
},
{
"name": "@algolia/monitoring",
"direct": false,
"version": "1.52.1",
"ecosystem": "npm"
},
{
"name": "@algolia/recommend",
"direct": false,
"version": "5.52.1",
"ecosystem": "npm"
},
{
"name": "@algolia/requester-browser-xhr",
"direct": false,
"version": "5.52.1",
"ecosystem": "npm"
},
{
"name": "@algolia/requester-fetch",
"direct": false,
"version": "5.52.1",
"ecosystem": "npm"
},
{
"name": "@algolia/requester-node-http",
"direct": false,
"version": "5.52.1",
"ecosystem": "npm"
},
{
"name": "@babel/helper-string-parser",
"direct": false,
"version": "7.27.1",
"ecosystem": "npm"
},
{
"name": "@babel/helper-validator-identifier",
"direct": false,
"version": "7.28.5",
"ecosystem": "npm"
},
{
"name": "@babel/parser",
"direct": false,
"version": "7.29.3",
"ecosystem": "npm"
},
{
"name": "@babel/types",
"direct": false,
"version": "7.29.0",
"ecosystem": "npm"
},
{
"name": "@docsearch/css",
"direct": false,
"version": "3.8.2",
"ecosystem": "npm"
},
{
"name": "@docsearch/js",
"direct": false,
"version": "3.8.2",
"ecosystem": "npm"
},
{
"name": "@docsearch/react",
"direct": false,
"version": "3.8.2",
"ecosystem": "npm"
},
{
"name": "@esbuild/aix-ppc64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-arm",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-arm64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-x64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/darwin-arm64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/darwin-x64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/freebsd-arm64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/freebsd-x64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-arm",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-arm64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-ia32",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-loong64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-mips64el",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-ppc64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-riscv64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-s390x",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-x64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/netbsd-x64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/openbsd-x64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/sunos-x64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-arm64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-ia32",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-x64",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "@iconify-json/simple-icons",
"direct": false,
"version": "1.2.83",
"ecosystem": "npm"
},
{
"name": "@iconify/types",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "@jridgewell/sourcemap-codec",
"direct": false,
"version": "1.5.5",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-android-arm-eabi",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-android-arm64",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-darwin-arm64",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-darwin-x64",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-freebsd-arm64",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-freebsd-x64",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-arm-gnueabihf",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-arm-musleabihf",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-arm64-gnu",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-arm64-musl",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-loong64-gnu",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-loong64-musl",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-ppc64-gnu",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-ppc64-musl",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-riscv64-gnu",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-riscv64-musl",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-s390x-gnu",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-x64-gnu",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-x64-musl",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-openbsd-x64",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-openharmony-arm64",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-win32-arm64-msvc",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-win32-ia32-msvc",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-win32-x64-gnu",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-win32-x64-msvc",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "@shikijs/core",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "@shikijs/engine-javascript",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "@shikijs/engine-oniguruma",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "@shikijs/langs",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "@shikijs/themes",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "@shikijs/transformers",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "@shikijs/types",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "@shikijs/vscode-textmate",
"direct": false,
"version": "10.0.2",
"ecosystem": "npm"
},
{
"name": "@types/estree",
"direct": false,
"version": "1.0.8",
"ecosystem": "npm"
},
{
"name": "@types/hast",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "@types/linkify-it",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "@types/markdown-it",
"direct": false,
"version": "14.1.2",
"ecosystem": "npm"
},
{
"name": "@types/mdast",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "@types/mdurl",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "@types/unist",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "@types/web-bluetooth",
"direct": false,
"version": "0.0.21",
"ecosystem": "npm"
},
{
"name": "@ungap/structured-clone",
"direct": false,
"version": "1.3.1",
"ecosystem": "npm"
},
{
"name": "@vitejs/plugin-vue",
"direct": false,
"version": "5.2.4",
"ecosystem": "npm"
},
{
"name": "@vue/compiler-core",
"direct": false,
"version": "3.5.34",
"ecosystem": "npm"
},
{
"name": "@vue/compiler-dom",
"direct": false,
"version": "3.5.34",
"ecosystem": "npm"
},
{
"name": "@vue/compiler-sfc",
"direct": false,
"version": "3.5.34",
"ecosystem": "npm"
},
{
"name": "@vue/compiler-ssr",
"direct": false,
"version": "3.5.34",
"ecosystem": "npm"
},
{
"name": "@vue/devtools-api",
"direct": false,
"version": "7.7.9",
"ecosystem": "npm"
},
{
"name": "@vue/devtools-kit",
"direct": false,
"version": "7.7.9",
"ecosystem": "npm"
},
{
"name": "@vue/devtools-shared",
"direct": false,
"version": "7.7.9",
"ecosystem": "npm"
},
{
"name": "@vue/reactivity",
"direct": false,
"version": "3.5.34",
"ecosystem": "npm"
},
{
"name": "@vue/runtime-core",
"direct": false,
"version": "3.5.34",
"ecosystem": "npm"
},
{
"name": "@vue/runtime-dom",
"direct": false,
"version": "3.5.34",
"ecosystem": "npm"
},
{
"name": "@vue/server-renderer",
"direct": false,
"version": "3.5.34",
"ecosystem": "npm"
},
{
"name": "@vue/shared",
"direct": false,
"version": "3.5.34",
"ecosystem": "npm"
},
{
"name": "@vueuse/core",
"direct": false,
"version": "12.8.2",
"ecosystem": "npm"
},
{
"name": "@vueuse/integrations",
"direct": false,
"version": "12.8.2",
"ecosystem": "npm"
},
{
"name": "@vueuse/metadata",
"direct": false,
"version": "12.8.2",
"ecosystem": "npm"
},
{
"name": "@vueuse/shared",
"direct": false,
"version": "12.8.2",
"ecosystem": "npm"
},
{
"name": "algoliasearch",
"direct": false,
"version": "5.52.1",
"ecosystem": "npm"
},
{
"name": "birpc",
"direct": false,
"version": "2.9.0",
"ecosystem": "npm"
},
{
"name": "ccount",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "character-entities-html4",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "character-entities-legacy",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "comma-separated-tokens",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "copy-anything",
"direct": false,
"version": "4.0.5",
"ecosystem": "npm"
},
{
"name": "csstype",
"direct": false,
"version": "3.2.3",
"ecosystem": "npm"
},
{
"name": "dequal",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "devlop",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "emoji-regex-xs",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "entities",
"direct": false,
"version": "7.0.1",
"ecosystem": "npm"
},
{
"name": "esbuild",
"direct": false,
"version": "0.21.5",
"ecosystem": "npm"
},
{
"name": "estree-walker",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "focus-trap",
"direct": false,
"version": "7.8.0",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.3",
"ecosystem": "npm"
},
{
"name": "hast-util-to-html",
"direct": false,
"version": "9.0.5",
"ecosystem": "npm"
},
{
"name": "hast-util-whitespace",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "hookable",
"direct": false,
"version": "5.5.3",
"ecosystem": "npm"
},
{
"name": "html-void-elements",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-what",
"direct": false,
"version": "5.5.0",
"ecosystem": "npm"
},
{
"name": "magic-string",
"direct": false,
"version": "0.30.21",
"ecosystem": "npm"
},
{
"name": "mark.js",
"direct": false,
"version": "8.11.1",
"ecosystem": "npm"
},
{
"name": "mdast-util-to-hast",
"direct": false,
"version": "13.2.1",
"ecosystem": "npm"
},
{
"name": "micromark-util-character",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "micromark-util-encode",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "micromark-util-sanitize-uri",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "micromark-util-symbol",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "micromark-util-types",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "minisearch",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "mitt",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "nanoid",
"direct": false,
"version": "3.3.16",
"ecosystem": "npm"
},
{
"name": "oniguruma-to-es",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "perfect-debounce",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "picocolors",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "postcss",
"direct": false,
"version": "8.5.25",
"ecosystem": "npm"
},
{
"name": "preact",
"direct": false,
"version": "10.29.2",
"ecosystem": "npm"
},
{
"name": "property-information",
"direct": false,
"version": "7.1.0",
"ecosystem": "npm"
},
{
"name": "regex",
"direct": false,
"version": "6.1.0",
"ecosystem": "npm"
},
{
"name": "regex-recursion",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "regex-utilities",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "rfdc",
"direct": false,
"version": "1.4.1",
"ecosystem": "npm"
},
{
"name": "rollup",
"direct": false,
"version": "4.60.4",
"ecosystem": "npm"
},
{
"name": "search-insights",
"direct": false,
"version": "2.17.3",
"ecosystem": "npm"
},
{
"name": "shiki",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "source-map-js",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "space-separated-tokens",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "speakingurl",
"direct": false,
"version": "14.0.1",
"ecosystem": "npm"
},
{
"name": "stringify-entities",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "superjson",
"direct": false,
"version": "2.2.6",
"ecosystem": "npm"
},
{
"name": "tabbable",
"direct": false,
"version": "6.4.0",
"ecosystem": "npm"
},
{
"name": "trim-lines",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "unist-util-is",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "unist-util-position",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "unist-util-stringify-position",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "unist-util-visit",
"direct": false,
"version": "5.1.0",
"ecosystem": "npm"
},
{
"name": "unist-util-visit-parents",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "vfile",
"direct": false,
"version": "6.0.3",
"ecosystem": "npm"
},
{
"name": "vfile-message",
"direct": false,
"version": "4.0.3",
"ecosystem": "npm"
},
{
"name": "vite",
"direct": false,
"version": "5.4.21",
"ecosystem": "npm"
},
{
"name": "vitepress",
"direct": false,
"version": "1.6.4",
"ecosystem": "npm"
},
{
"name": "vue",
"direct": false,
"version": "3.5.34",
"ecosystem": "npm"
},
{
"name": "zwitch",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "dereuromark/cakephp-tools",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "ext-intl",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "ext-json",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "fig-r/psr2r-sniffer",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "geocoder-php/common-http",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "geocoder-php/google-maps-provider",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "geocoder-php/nominatim-provider",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "geocoder-php/provider-implementation",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php-http/discovery",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php-http/message",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpunit/phpunit",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "psr/http-message",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "symfony/http-client",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "willdurand/geocoder",
"direct": false,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 189,
"direct_count": 1,
"indirect_count": 188
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 60,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 34,
"closed_unmerged_prs": 11
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "dereuromark",
"commits": 310,
"avatar_url": "https://avatars.githubusercontent.com/u/39854?v=4"
},
{
"type": "User",
"login": "cewi",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/1643900?v=4"
},
{
"type": "User",
"login": "ajfranzoia",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/964115?v=4"
},
{
"type": "User",
"login": "chrissPony",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/6143417?v=4"
},
{
"type": "User",
"login": "lamasgergo",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/879741?v=4"
},
{
"type": "User",
"login": "steefaan",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/5982785?v=4"
},
{
"type": "User",
"login": "justindenick",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/3502003?v=4"
},
{
"type": "User",
"login": "zeroasterisk",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/23422?v=4"
},
{
"type": "User",
"login": "ADmad",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/142658?v=4"
},
{
"type": "User",
"login": "LDSign",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/1359083?v=4"
}
],
"contributors_sampled": 22,
"top_contributor_share": 0.803
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"deploy-docs.yml"
],
"has_docs_dir": true,
"linter_configs": [
"phpcs.xml",
"phpstan.neon"
],
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 1,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/29 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 6 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 6,
"reason": "4 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "28b4dfc0e41e7961d3f83a2073f1b2b9adeb31b4",
"ran_at": "2026-08-02T09:46:01Z",
"aggregate_score": 5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-08-02T09:43:32Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-08-02T09:42:19Z",
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/dereuromark/cakephp-geo",
"host": "github.com",
"name": "cakephp-geo",
"owner": "dereuromark"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": "The weighted overall 72 is calibrated to 86 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 72,
"calibrated": 86,
"calibration": "2026-08-02"
}
}
],
"value": 86,
"inputs": {
"security": 60,
"vitality": 85,
"community": 55,
"governance": 68,
"calibration": "2026-08-02",
"engineering": 94,
"ai_readiness": 45,
"weighted_overall_raw": 72
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 85,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"commits_last_year": 67,
"human_commit_share": 0.99,
"days_since_last_push": 0,
"active_weeks_last_year": 26
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "26/52 weeks with commits",
"points": 18,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 26
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "67 commits in the last year",
"points": 16.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 67
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 43,
"latest_release_tag": "3.8.0",
"releases_from_tags": false,
"days_since_latest_release": 89,
"mean_days_between_releases": 88.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "43 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 43
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 89 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 89
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~88.4 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 88.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 37,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 37 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 37
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 55,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "weak",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"forks": 30,
"stars": 51,
"watchers": 6,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "51 stars",
"points": 27.6,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 51
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "30 forks",
"points": 12.2,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 30
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "6 watchers",
"points": 3.9,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 6
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"packages": [
"dereuromark/cakephp-geo"
],
"dependents": 4,
"ecosystems": "packagist",
"total_downloads": 189748,
"monthly_downloads": 2735
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,735 downloads/month across packagist",
"points": 45.8,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2735,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "4 packages depend on it",
"points": 4.7,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 4
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 68,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "weak",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 22,
"top_contributor_share": 0.803
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 80% of commits",
"points": 4.4,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 80
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "22 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 22
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 77,
"inputs": {
"merged_prs": 60,
"open_issues": 0,
"closed_issues": 34,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 11,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "60/71 decided PRs merged",
"points": 25.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 60,
"decided": 71
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/29 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 70,
"inputs": {
"followers": 748,
"owner_type": "User",
"is_verified": null,
"owner_login": "dereuromark",
"public_repos": 123,
"account_age_days": 6442
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "748 followers of dereuromark",
"points": 20.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 748,
"login": "dereuromark"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "123 public repos, account ~17 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 123
}
},
{
"code": "account_age_years",
"params": {
"years": 17
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"dereuromark/cakephp-geo"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 90
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 90 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 90
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "43 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 43
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "exceptional",
"name": "Engineering Quality",
"value": 94,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "phpcs.xml, phpstan.neon",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "phpcs.xml, phpstan.neon"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "exceptional",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"cakephp",
"cakephp-plugin",
"php",
"geocoder-provider",
"geocoding",
"geocoder"
],
"has_wiki": true,
"homepage": "https://dereuromark.github.io/cakephp-geo/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://dereuromark.github.io/cakephp-geo/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 60,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 13,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 5,
"scorecard_aggregate": 5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/29 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "4 existing vulnerabilities detected",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 174 resolved dependencies against OSV; 15 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 174
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 15
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 4,
"affected_packages": 2,
"assessed_packages": 174,
"unassessed_packages": 15,
"affected_by_severity": "high 1, moderate 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 174,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 10
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "weak",
"name": "AI Readiness",
"value": 45,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.374,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "37 of 99 human commits state their intent (structured subject or explanatory body)",
"points": 19.9,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 37,
"sampled": 99
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.01
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "phpcs.xml, phpstan.neon",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "phpcs.xml, phpstan.neon"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "1 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 54674,
"source_files_sampled": 94,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/94 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 94,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library",
"host-extension"
],
"labels": [
"library",
"plugin"
],
"scores": {
"plugin": 4,
"web-ui": 2,
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:packagist",
"weight": 6
},
{
"tier": "description",
"label": "plugin",
"source": "description:plugin",
"weight": 2
},
{
"tier": "tags",
"label": "plugin",
"source": "tag:plugin",
"weight": 2
},
{
"tier": "tags",
"label": "web-ui",
"source": "tag:admin-panel",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": true,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-08-02T09:46:18.955085Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/dereuromark/cakephp-geo.svg",
"full_name": "dereuromark/cakephp-geo",
"license_state": "standard",
"license_spdx": "MIT"
}Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v2.5.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken — Packagist.