laravel-chronicle/kms-aws

Name lookalikedanger

The package is flagged as borrowing the identity of laravel/octane, a much more established package, even though artifact overlap is zero. That makes it unclear whether consumers intended to install this package and is a severe adoption risk.

Release historycaution

The package is 105 days old with three releases and a median interval of about 21 days, showing active early development but limited maturity.

Repo bus factorcaution

All six recent commits came from one contributor. Organization backing helps provide continuity, but no second active contributor is shown, leaving maintenance capacity concentrated.

Workflow auditcaution

All eight workflows were analyzed successfully, all 12 action references are pinned, and no untrusted checkout or script-injection sink was found. Four workflows grant top-level write permissions, which is a mild hygiene caution, but no untrusted path reaches those permissions.