sudhaus7/xlsimport

Clear MIT licensing, a readable package, and repository tests improve transparency. Composer-based builds are straightforward, but missing security documentation and unpinned workflow actions leave modest process risk.

Latest 6.0.1

Packagist

64%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The project has released 30 versions over more than six years and published the latest version recently, but only one release appeared in the last 12 months, indicating a slower current cadence.

Repo bus factor

All 2 recent commits came from one contributor, creating concentrated maintenance risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activity

The repository recorded only 2 commits in the last 3 months, showing limited recent maintenance activity despite the recent release.

Repo tooling

The project uses Composer build tooling, which supports a conventional build process, but no security scanning tools were detected, leaving a modest security-process gap.

Security policy

The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.