laravel-blaze/builder

Name lookalikedanger

The package borrows the identity of the far more established laravel/sail, with explicit lookalike-identity evidence. Consumers most likely seeking laravel/sail could select this package instead, making the naming a severe adoption risk.

Release historydanger

All eight releases arrived within roughly two hours on June 5, 2025, and there have been no releases in the following 15 months. That compressed launch followed by prolonged silence indicates weak ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the absence of registry releases for over a year. This substantially raises abandonment risk.

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script, which increases the code executed during installation. No provided signal shows that this extra execution is independently constrained or tested.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. For a package that runs an install-time script, the missing security tooling weakens engineering assurance.