laravel-doctrine/fluent

Name lookalikedanger

The package is marked as borrowing the identity of the much more established laravel/tinker, with 0.0 artifact overlap and no README identification as a lookalike. Consumers may have intended laravel/tinker instead, making this a severe adoption risk.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. Although a recent release exists, the lack of current development activity raises maintenance risk.

Repo issue activitycaution

There were 0 new or closed issues and 0 new or merged pull requests in the last month, leaving no evidence of active issue handling. The small backlog is not itself severe, but the recent inactivity is a caution.

Security policycaution

The repository has no security policy. This reduces disclosure transparency, though it is a hygiene concern rather than evidence that the release is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted-trigger sinks, but both action references are unpinned. Missing a top-level permissions block is acceptable here, while unpinned references leave a modest reproducibility and supply-chain hygiene gap.