laravel-json-api/cursor-pagination

Name lookalikedanger

The package is reported as borrowing the identity of the much more established laravel/passport, with borrows_lookalike_identity true; the zero artifact overlap and README distinction do not compensate for that supply-chain confusion risk.

Release historycaution

The package is mature at 1,874 days old, but it has only 7 releases and a median release interval of about 348 days, with 1 release in the last 12 months; this reflects a slow maintenance cadence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating no recent maintenance activity despite the release being available.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and handling, although this is a documentation gap rather than evidence of an active security problem.

Workflow auditcaution

The only workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, leaving a modest build-reproducibility and action-change risk.