The package includes extensive documentation, tests, a changelog, and a clear license. Its small public footprint and lack of security scanning leave less independent evidence to offset the long maintenance gap.
42%
Total Score
33
50
72
83
The package is over six years old and has had no release in the last 12 months; all 27 releases occurred by November 2019, indicating prolonged release abandonment.
The repository had zero commits and zero active maintainers in the last three months, strongly reinforcing the risk that maintenance has stopped.
The release declares 17 runtime dependencies, including several PHP extensions and two library dependencies; this is a meaningful integration surface but not excessive for a spreadsheet engine.
The repository is owned by an individual account rather than an organization, so there is no organizational backing shown to compensate for the thin recent activity.
There were no new or merged pull requests in the last month, and two pull requests remain open; this offers little evidence of active maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
markbaker/matrix Version ^1.1 | — | — |
psr/simple-cache Version ^1.0 | — | — |
markbaker/complex Version ^1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.