league/csv-doctrine

Registry deprecationdanger

Packagist marks the entire package as abandoned and names league/csv as its replacement. This is a direct warning against adopting the package, not merely a release-specific notice.

Release historydanger

The latest release was published over two years ago, and there were no releases in the preceding 12 months. The three-release history provides little evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This reinforces the abandonment concern, although the repository is not archived.

Security policycaution

The repository has no security policy. For a small adapter this is a transparency gap, though it is secondary to the package's explicit abandonment and stale maintenance.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted checkouts, but its one action use is unpinned. That is a minor reproducibility and supply-chain hygiene gap, not the main adoption risk.