laravel-json-api/validation

Name lookalikedanger

The signal says this package borrows the identity of laravel/pint, which has far more downloads and stable releases; consumers may have intended that package instead. The zero artifact overlap does not offset the explicit identity-borrowing finding.

Release historycaution

The package has existed for over 5 years with 24 releases, but only 1 release in the last 12 months. Its recent release supports continued availability, while the slow current cadence limits confidence in active maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although a release was published recently, the lack of recent development activity raises maintenance risk.

Security policycaution

The linked repository has no security policy. This does not show a security flaw, but it reduces transparency about how vulnerabilities are reported and handled.

Workflow auditcaution

The workflow audit completed successfully with no high-confidence findings or untrusted checkouts, but all 3 action references are unpinned. This is a modest reproducibility and supply-chain hygiene gap.