laravel-enso/files

Name lookalikedanger

The package is reported to borrow the identity of the much more downloaded laravel/sail package, with borrows_lookalike_identity true. Even though artifact overlap is zero and the README identifies the Enso package, consumers may still select it expecting the lookalike.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a real maintenance concern, though the recent registry releases provide some compensating evidence.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. The missing scanning is a hygiene gap, not by itself a severe dependency risk.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and response, especially for a package handling uploaded files and sharing links.