laravel-stars/tools

Name lookalikedanger

The package borrows the identity of the much more established laravel/sail, with borrows_lookalike_identity true. Artifact overlap is zero, but consumers may still select this package when they intended laravel/sail, making this a severe adoption risk.

Maintainerscaution

Only one account has registry publishing access, and project_backing identifies an individual repository owner rather than an organization. This leaves a thin operational base for updates and support.

Release historycaution

The package is over six years old but has only three releases and none in the last 12 months. Its release activity stopped after February 2020, which is a substantial maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the long release gap, this provides little evidence of ongoing maintenance.

Repo toolingcaution

The repository uses Composer, which is appropriate for a PHP package. No security scanning tools are configured, leaving a minor hygiene gap without proving the package is unsafe.