The package has clear documentation, a matching MPL-2.0 license, release notes, and a straightforward Composer layout. Single-person ownership, no security policy, and minimal repository adoption leave limited evidence of ongoing support.
56%
Total Score
50
70
50
The latest release was published on January 8, 2021, and there have been no releases in more than five years. The four-release history shows an initially active project but no current maintenance.
Only one registry maintainer is listed, limiting publishing continuity if that person becomes unavailable. The repository is user-owned rather than organization-backed, so there is no provided evidence of a broader maintenance team.
The repository recorded zero commits and zero active maintainers in the last three months, with its last push on March 8, 2021. This strongly indicates that fixes and compatibility updates are unlikely to arrive.
The repository has zero stars and forks and one watcher. Popularity is supporting evidence rather than a verdict, but these values provide little external evidence of adoption or community support.
No security policy was found in the linked repository. This is a transparency gap for a package that processes uploaded CSV data and writes to a database, although it does not by itself show an active security problem.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/csv Version ^9.6 | — | — |
doctrine/dbal Version ^2.10 | — | — |
illuminate/support Version ~5|~6|~7 | — | — |
spatie/laravel-collection-macros Version ^6.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.