Healthy and suitable to depend on, with a small maintenance risk. It has a current stable release, active repository, tests, release notes, and clear organization backing; all recent commits come from one contributor and the repository has no security policy.
82%
Total Score
83
100
94
88
All six recent commits came from one contributor, leaving a thin individual maintenance base. Organization ownership provides some continuity, but no second active contributor is shown.
Composer build tooling is present, but no security scanning tools were detected. This is a transparency and defense-in-depth gap, though it is not evidence that the package is unsafe.
The repository has no security policy, so the process for reporting and handling vulnerabilities is unclear. This is a modest transparency concern for a package used in CMS projects.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/csv Version ^9.27 | — | — |
statamic/cms Version ^6.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.