mehr-it/csv

Clear documentation, tests, an MIT license, and a matching organization-owned repository support dependable use. The small dependency surface and lack of install scripts reduce routine integration risk, though the project provides limited recent security and maintenance visibility.

Latest 1.10.0

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 14 releases since April 2019, but none in the last 12 months and the latest release was over three years ago. This indicates meaningful maintenance stagnation despite a previously regular median release interval of about 48 days.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old last push, this is evidence of a dormant project and raises abandonment risk.

Repo tooling

Composer build tooling is present, but no security scanning tooling was detected. For a small library this is a moderate transparency and maintenance gap rather than a severe risk.

Repository archived

The linked repository is not archived, although its last push was over three years ago. Continued availability is positive, but the old last-push date is consistent with the maintenance concern.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, particularly for a library that may be embedded in many applications.