The bundle is small and clearly identified, with a license, release notes, and no install-time scripts. It has no security scanning or policy, and one maintainer leaves little backup for future fixes.
58%
Total Score
50
88
75
One registry maintainer is consistent with the linked user-owned repository, but it provides little visible redundancy if that maintainer becomes unavailable.
The package has seven releases since January 2018, but none in the last 12 months and a median release interval of about 15 months. The April 2025 release provides some recent evidence of maintenance, but the current gap is a caution.
There were zero commits and zero active maintainers in the last three months. Combined with the sparse release history, this indicates limited current maintenance capacity.
Composer is used for the build, but no security scanning tool is configured. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a maintenance and transparency concern for a dependency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpoffice/phpspreadsheet Version ~1.0 | — | — |
symfony/framework-bundle Version ~7.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.