The package is clearly documented, licensed, and tied to a matching source repository with release notes. Its maintenance has stalled, and there is no published security policy, so pin this version rather than expecting ongoing compatibility work.
55%
Total Score
63
100
89
75
Only one registry maintainer is listed, which limits publishing redundancy; the linked user-owned repository provides some direct project backing but does not remove the single-maintainer risk.
The package has 35 releases and a historically regular median interval of about 13 days, but its latest release was over four years ago and there were no releases in the last 12 months. This is a meaningful maintenance concern.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the absence of releases for over four years, this raises abandonment and compatibility risk.
There are five open issues and one open pull request, with no issues or pull requests created or closed in the last month. This is consistent with limited current project attention.
Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than evidence that the release is unsafe by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
maatwebsite/excel Version ^3.1 | — | — |
illuminate/support Version >=5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.