laravelplus/laravel-updater

Name lookalikedanger

The package explicitly borrows the identity of the much more established laravel/pulse, with 0.24% artifact overlap and no self-described fork relationship. Consumers looking for laravel/pulse could easily install this unrelated package instead, which is a severe supply-chain and naming risk.

Package scaffoldingcaution

The artifact includes tests, a changelog, and release notes for this version, but its README identifies and documents League Flysystem instead of Laravel Updater. That serious documentation mismatch weakens transparency despite the otherwise good scaffolding.

Release historycaution

All seven releases occurred within a very short burst around the package's first publication, with no demonstrated release activity afterward. This is consistent with a young project whose long-term maintenance is unproven.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. Although version 1.0.6 was released recently in the collected history, there is no evidence of ongoing maintenance after that release.

Security policycaution

The repository has no published security policy. This is a transparency gap, but it is less significant than the naming and maintenance concerns for this small package.