Healthy and reasonable to depend on. The source project is actively maintained with recent commits, issue resolution, tests, release notes, and an organization behind it, though the registry shows no releases in the last 12 months and the repository lacks a security policy and explicit workflow token permissions.
82%
Total Score
100
94
80
This is a mature package released since 2014 with 10 releases, but it has had no registry release in the last 12 months. Active repository work and a recent release history partly compensate for the slow registry cadence.
No repository security policy was found, leaving vulnerability reporting and response expectations less transparent for a library intended for integration into applications.
All three workflows lack top-level token permissions declarations. No workflow requests top-level write access, but explicit least-privilege permissions would make the build configuration safer and clearer.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpoffice/common Version ^1 | — | — |
phpoffice/phpspreadsheet Version ^1.9 || ^2.0 || ^3.0 || ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.