k1low/xlsx

The package includes tests, a README, and a small dependency set, but it has no recent maintenance or security policy. Its single-maintainer project has very little adoption, increasing the risk that compatibility and vulnerabilities will go unaddressed.

Latest v0.4.0

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The last release was in February 2017, with no releases in the past 12 months; the package has been inactive for nearly nine years. Its earlier five-release history shows some initial development but does not offset the long pause.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the nearly nine-year gap since the last push. No provided activity signal shows current maintenance capacity.

Maintainers

Only one registry account has publish access. The linked repository is owned by an individual rather than an organization, so the thin maintainer base provides little redundancy if the maintainer is unavailable.

Repo popularity

The repository has only 3 stars and 3 forks, so there is little community evidence to compensate for the inactive maintainer project. Popularity is supporting evidence, but this very small footprint increases abandonment risk.

Security policy

The repository has no security policy and no security-scanning tools. This is a transparency and vulnerability-response gap, especially for a package with no recent maintenance.