businessg/laravel-excel

Repo commit activitycaution

Two commits from two active maintainers in the last three months show some ongoing work, though the small volume limits evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving supply-chain hygiene less visible.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a package that processes application data.

Version stabilitycaution

The assessed version is a stable major release and is not a prerelease, but 7 of the 9 recent releases were prereleases, which adds some maturity uncertainty.

Workflow auditcaution

The audit found one high-confidence medium-severity use of an archived action, and all four action references are unpinned. No dangerous triggers, untrusted checkouts, or script injections were detected.