Turn your CSV files into objects. It's like an ORM for CSV!
58%
Total Score
caution
Usable with caveats: no registry release since 2017 and no commits in the last three months.
The latest release was 9 years ago, with no releases in the last 12 months; the five-release history shows a mature but currently inactive release stream.
There were zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern for a package whose latest registry release is already 9 years old.
One registry maintainer indicates a thin publishing base, but the linked repository is owned by the same individual, so this is consistent with a small owner-led project rather than unexplained ownership.
The repository is owned by an individual account rather than an organization, so the single-maintainer context represents limited project backing.
The repository uses Composer for builds, but no security-scanning tools were detected. This is a modest transparency and monitoring gap, not evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/csv Version ^8.0 | — | — |
tightenco/collect Version ^5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.