laravel-json-api/spec

Name lookalikedanger

The package is reported to borrow laravel/pint’s identity, while artifact overlap is 0.0 and the README does not identify it as a fork or integration. That makes mistaken adoption a serious concern, even though the names are not functionally similar.

Release historycaution

The package has existed for 2063 days with 16 releases, but only 1 release in the last 12 months. This indicates a mature but slow-moving project rather than active maintenance.

Repo commit activitycaution

The repository has 0 commits and 0 active maintainers in the last 3 months. A recent push and one release in the last year provide some compensating evidence, but they do not show ongoing development capacity.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it is not by itself evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, and it has no top-level write permissions. All 3 of 3 action references are unpinned, which is a workflow supply-chain hygiene gap.