Is league/csv safe to use?

league/csv has no known vulnerabilities on the latest version (9.28.0). DepScope rates its health at 62/100 (moderate risk).

What is the latest version of league/csv?

The latest version of league/csv is 9.28.0, released 2025-12-27.

Does league/csv have known vulnerabilities?

No known vulnerabilities on the latest version of league/csv.

Is league/csv deprecated?

No, league/csv is actively maintained. Latest release: 9.28.0 (2025-12-27).

What are alternatives to league/csv?

DepScope has no curated alternatives for league/csv at this time.

What license does league/csv use?

league/csv is licensed under MIT.

league/csv

composerv9.28.0

CSV data manipulation made easy in PHP

License MITpermissive83 versions1 maintainers2 deps

thephpleague/csv

/ 100

Health

safe to use

league/[email protected] is safe to use (health: 62/100)

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

7/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

2.9/10

poor

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

3

Primary author dominance

96%

GitHub stars

3,472

single active maintainer 3msingle author dominance

Health History

Dependency Tree

License Audit

Dependencies (2)

php ext-filter

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/composer/league/csv

Last updated · 2025-12-27T15:18:42+00:00