laravelgpt/vscode-laravel-git

Name lookalikedanger

The package explicitly borrows the identity of the much more established laravel/legacy-factories, despite having only 0.05% artifact overlap and no self-described fork. Consumers may have intended the lookalike package instead.

Release historydanger

All three releases were published on the same day, and there has been no release for 316 days. That provides little evidence of an established release cadence.

Maintainerscaution

The registry lists two maintainers, including the generic name "Your Name," while the project is backed by an individual-owned repository. This is a thin and weakly established maintainer base.

Repo popularitycaution

The linked repository has 0 stars, 0 forks, and 0 watchers. Popularity is only supporting evidence, but this gives no outside signal of project adoption or review.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present. That weakens automated supply-chain hygiene, although it is not evidence that the release is unsafe by itself.