laravel-enso/localisation

Name lookalikedanger

The package is flagged as borrowing the identity of the much larger laravel/socialite, with 4.3 million monthly downloads versus 430 here. Artifact overlap is 0 and the repository clearly matches this package, which reduces the concern but does not remove the naming risk.

Dependency profilecaution

The package has eight runtime dependencies, all aligned with the Laravel Enso ecosystem, with no development-only dependencies declared. This is a meaningful integration surface but not an unusual or inherently unhealthy profile for this package.

Repo bus factorcaution

All recent commit activity comes from one contributor, creating a narrow active-maintainer base. Organization ownership partly compensates by allowing maintenance to be handed off, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, so recent maintenance activity is thin despite the package's recent release.

Repo toolingcaution

Composer is used as the build tool, but no repository security scanning tool is present. This is a transparency gap rather than evidence that the package is unsafe.