laravelcm/laravel-subscriptions

Name lookalikedanger

The package strongly resembles laravel/serializable-closure and is marked as borrowing that package's identity, despite zero artifact overlap. Consumers may have intended the far more established package instead.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the past three months. Although the release is recent, this provides weak evidence of ongoing maintenance capacity.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and maintenance response. Dependabot provides some compensating security hygiene but does not replace a clear reporting process.

Workflow auditcaution

All 11 analyzed action references are unpinned, which leaves workflow dependencies exposed to changing upstream code. The audit found no untrusted checkouts, script injection, or high-confidence dangerous findings.