xunlight/spout

It includes a matching repository, clear licensing, a useful README, tests in the source tree, and no install-time scripts. The absence of a security policy and scanning reduces transparency for a library handling spreadsheet data.

Latest v3.0.2.3

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in nearly seven years: its latest release was September 2019, with zero releases in the last 12 months. Its 37 historical releases show prior development but do not offset the prolonged gap.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release hiatus and indicating substantial abandonment risk.

Repo issue activity

There was no new issue or pull request activity in the last month, and no pull requests were merged. This provides additional evidence that the project is not actively maintained.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in a library that processes spreadsheet files.