Package Health

ecbc-phpoffice/phpspreadsheet

The package includes a clear README, changelog, MIT license, and no install-time scripts. Its only registry release and linked repository activity both stop in November 2022, with no commits in the last three months and minimal repository adoption.

Latest 1.24.0PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

This package has only one release, published 1,415 days ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the package's long release gap and materially increasing abandonment risk.

Dependency profilecaution

The package declares 21 runtime dependencies, including several required PHP extensions and supporting libraries. This is a meaningful dependency surface but not, by itself, evidence of poor package health.

Repo popularitycaution

The repository has one star, zero forks, and one watcher. Popularity is only supporting evidence, but these very low figures provide little evidence of an active user or contributor base.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a hygiene gap, while the much stronger maintenance concern comes from the inactive release and commit history.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Maarten Balliauw
Mark Baker
Franck Lefevre
Erik Tilt
Adrien Crivelli

Direct Dependencies

DependencyLast ReleaseScore
psr/http-client
Version ^1.0
—
—
markbaker/matrix
Version ^3.0
—
—
psr/http-factory
Version ^1.0
—
—
psr/simple-cache
Version ^1.0 || ^2.0
—
—
markbaker/complex
Version ^3.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform