laravel-liberu/permissions

Name lookalikedanger

The package is flagged as borrowing the identity of laravel/pulse, with borrows_lookalike_identity true and only 13 monthly downloads versus 1,494,844 for laravel/pulse. Although artifact overlap is 0 and the README does not claim to be that package, the identity signal is still a severe consumer-confusion risk.

Release historydanger

The package has a long history and 192 releases, but its latest release was on October 14, 2023, with no releases in the last 12 months. The earlier rapid cadence shows past activity but does not compensate for the current multi-year release gap.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in October 2023. This is strong evidence of stalled maintenance for a dependency intended to integrate with an application framework.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, indicating very limited independent visibility or adoption. Popularity is supporting evidence rather than decisive on its own, so this reinforces the maintenance concerns without determining the verdict.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap, while the absence of workflows means there is no observed workflow risk to weigh against it.