Package Health

alxishin/phpspreadsheet

The repository includes tests, a changelog, Composer build tooling, Dependabot, and read-only workflow permissions. However, the package has had no releases or repository commits for about 19 months, and all 25 workflow actions are unpinned.

Latest 4.0.2PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

33

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Release historydanger

Only two releases exist, with none in the last 12 months; the latest release was about 19 months ago. This is a substantial maintenance concern despite the package being over a year old.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the roughly 19-month gap since the last push. This materially raises abandonment risk.

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so there is no visible organizational backing to compensate for the thin activity record.

Repo issue activitycaution

There were no new or merged pull requests in the last month and no new or closed issues; with open issue count unknown, this indicates inactivity but not necessarily unresolved defects.

Repo popularitycaution

The linked repository reports zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external sign of an active user or contributor community.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Maarten Balliauw
Mark Baker
Franck Lefevre
Erik Tilt
Adrien Crivelli

Direct Dependencies

DependencyLast ReleaseScore
composer/pcre
Version ^1||^2||^3
—
—
psr/http-client
Version ^1.0
—
—
markbaker/matrix
Version ^3.0
—
—
psr/http-factory
Version ^1.0
—
—
psr/simple-cache
Version ^1.0 || ^2.0 || ^3.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform