spatie/simple-excel

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected, leaving a modest transparency and maintenance-hygiene gap.

Security policycaution

The repository has no security policy, which makes vulnerability-reporting expectations less explicit, though this is a hygiene gap rather than evidence of abandonment.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts or script injection, but the audit found a high-confidence unpinned container image and all seven action references are unpinned. This weakens build reproducibility and workflow supply-chain hygiene.