The MIT license, README, and stable package layout help adoption. Install-time scripts and seven runtime dependencies add friction; the repository could not be found, so maintenance and provenance remain unverified.
42%
Total Score
50
80
75
The latest release was in April 2022, with no releases in the last 12 months. This roughly four-year gap is strong evidence of stalled maintenance.
Seven runtime dependencies, including PHP extensions and PhpSpreadsheet, create meaningful environmental and maintenance coupling. The dependency set is substantial but not inherently unsafe.
post-install-cmd and post-update-cmd scripts run during Composer operations. The README describes them as checks for required console utilities, but install-time execution still adds operational and review risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
text-media/mime-types Version ^1.0 | — | — |
phpoffice/phpspreadsheet Version ^1.6 | — | — |
text-media/encoding-converter Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.