IPInfo uses the geoip2 library, which will be added in T174553/T269475, following a security readiness review: T262963.
Until then Phan CI fails, blocking new commits to the IPInfo repo, so we either need to disable Phan temporarily or use composer in CI temporarily.
We should reinstate the original config once geoip2 is available in mediawiki/vendor.