portphp/spreadsheet

Repo bus factorcaution

Only one contributor made the two commits in the last three months, holding 100% of recent commit activity. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and handling less transparent than they could be.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings, uses read-only permissions, and has no untrusted triggers or injection sinks. However, all three action references are unpinned, creating a modest reproducibility and workflow supply-chain gap.