laravel-json-api/laravel

Name lookalikedanger

The package explicitly borrows the identity of the much more established laravel/pail, even though artifact overlap is zero and the README does not identify it as a fork. Consumers may have intended the lookalike package instead.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 80 issues remain open. This suggests some responsiveness risk, though the recent release and commits provide compensation.

Security policycaution

The repository has no published security policy. This is a transparency gap for a library used in application APIs, although it is not evidence of abandonment by itself.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-confidence audit findings. However, all three action references are unpinned, which leaves the build less reproducible.