Package Health

endroid/simple-excel

The source was updated for this release but has had no commits in the past three months. Its repository does not name this package in the README, and all five workflow actions are unpinned.

Latest 3.4.0PackagistPackagist

20%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

71

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

The registry marks the entire package as abandoned, with no clear deprecation message and a replacement pointing to the same package name. This is a severe adoption risk despite recent release evidence.

Release historycaution

The package has existed for about 11 years with 28 releases, but only one release appeared in the last 12 months. That indicates substantially reduced recent maintenance.

Repo commit activitycaution

The linked repository recorded zero commits and zero active maintainers in the past three months. The recent release and push provide some compensating evidence, but current development activity is absent.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, so the source may not clearly belong to the published package.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, sinks, or findings, but all five action references are unpinned. That leaves the build exposed to unexpected action changes.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jeroen van den Enden

Direct Dependencies

DependencyLast ReleaseScore
symfony/http-foundation
Version ^6.4||^7.4||^8.0
—
—
phpoffice/phpspreadsheet
Version ^5.0
—
—

Weekly Downloads

Info

Last Published
11 months ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform