laravel-enso/countries

Name lookalikedanger

The package is reported as resembling laravel/sentinel, which has far more downloads, and borrows its identity despite no fork disclosure or artifact overlap. This creates a serious risk that consumers intended to install the lookalike package instead.

Dependency profilecaution

The package declares nine runtime dependencies, including Laravel Enso components and the Laravel framework. This is a meaningful integration surface but is consistent with a foundational Laravel backend package.

Repo bus factorcaution

All four recent commits came from one contributor, giving the project a very concentrated recent contributor base. This increases continuity risk despite organization backing.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools were detected. The missing scanning is a modest supply-chain hygiene gap, not proof of unsafe code.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and response expectations.