aventusgroup/phpspreadsheet

Release historydanger

The package has had no releases in the last 12 months, and its latest release was published over four years ago. This is strong evidence that maintenance has stopped for this release line.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of recent releases and indicating a high abandonment risk.

Repository archivedcaution

The repository is not marked archived, which is a compensating signal, but it was last pushed over four years ago. The stale repository still materially lowers confidence in ongoing maintenance.

Security policycaution

The repository has no security policy. For a library handling spreadsheet files, this leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkouts or injection findings, but all 23 action references are unpinned and one archived action was detected with high confidence. This creates avoidable build reproducibility and maintenance risk.