laravel-enso/data-import

Name lookalikedanger

The package borrows the identity of the much more established laravel/sanctum, with borrows_lookalike_identity true. Even though artifact overlap is 0.0, consumers may have intended to install laravel/sanctum instead, making this a severe supply-chain adoption risk.

Dependency profilecaution

The package declares 13 runtime dependencies and no development dependencies. This is a relatively broad runtime dependency surface, which adds some maintenance coupling but is consistent with a feature-rich Laravel Enso integration.

Repo bus factorcaution

All 7 recent commits came from one contributor, giving the project a bus factor of one. Organization backing partly compensates for this concentration, but continuity still depends heavily on one active maintainer.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning layer is a modest transparency and hygiene concern.

Security policycaution

The repository has no published security policy. For a package handling uploaded spreadsheets and queued processing, this weakens the project's vulnerability-reporting transparency.