laravel-enso/cnpvalidator

Name lookalikedanger

The package borrows the identity of the much more established laravel/pail package, and consumers may have intended to install that package instead; the zero artifact overlap does not offset the identity concern.

Registry deprecationdanger

Packagist marks the entire package as abandoned, which is a severe dependency risk despite the recent 5.0.4 release and stated replacement being the same package name.

Repo bus factorcaution

All five recent commits came from one contributor, creating concentration risk; organization ownership provides some ability to hand maintenance off.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a secondary transparency gap beside the stronger registry concerns.