dingmuqi/yii2-phpexcel

It has a clear MIT license, a matching repository, a useful README, and only two runtime dependencies. There is no security policy or automated security scanning, limiting transparency and response capacity if maintenance resumes.

Latest 2.0.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in about 6 years and 6 months, with zero releases in the last 12 months. This is strong evidence of abandonment risk, despite the package having four historical releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release pause. No provided activity signal shows recent maintenance to compensate.

Repo issue activity

There were no new or merged pull requests and no issue activity in the last month. The null open-issue count limits interpretation, but the observed inactivity adds to the maintenance concern.

Repo tooling

Composer is used for builds, but the repository reports no security-scanning tools. This is a transparency and maintenance-hygiene gap, though it is less serious than the prolonged inactivity.

Security policy

The repository has no security policy. That weakens the project's documented process for receiving and handling vulnerabilities, with no provided compensating security evidence.