carloschininin/php-spreadsheet

Licensedanger

The manifest declares a proprietary license, with no license file detected in the package or repository. That materially limits transparency and makes the release unsuitable for projects expecting an open-source dependency.

Maintainerscaution

One registry publishing maintainer is listed. With user-owned project backing rather than organizational backing, this leaves a thin operational and succession base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern despite the recent release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of a security incident.

Security policycaution

The repository has no security policy. Consumers have no documented channel or process for reporting vulnerabilities, which weakens project transparency.