nazalas/phpspreadsheet
The MIT license, documentation, tests in the repository, and Dependabot provide useful project structure. However, this release is several years old with no recent commits, and its workflows use unpinned actions, including one archived action.
38%
Total Score
0
83
75
Health Score Breakdown
The package has had 36 releases but none in the last 12 months, and its latest release was over four years ago. That long release gap is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the absence of recent registry releases.
All 23 analyzed action references are unpinned, and the audit found one high-confidence medium-severity use of an archived action. The workflows have no untrusted triggers or injection sinks, which limits the impact to caution rather than danger.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Maarten Balliauw |
| Mark Baker |
| Franck Lefevre |
| Erik Tilt |
| Adrien Crivelli |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0 | — | — |
markbaker/matrix Version ^3.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/simple-cache Version ^1.0 || ^2.0 || ^3.0 | — | — |
markbaker/complex Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.