livewire-ui/spotlight

The repository is organized, licensed, documented, and still receives releases, with tests and security tooling in the source project. Its registry listing is abandoned in favor of another package, and the name also borrows a lookalike identity; use the replacement instead.

Latest 2.0.4

Packagist

22%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package is reported to borrow the identity of livewire/flux, with 0.0 artifact overlap and no README identification as that package. The explicit identity borrowing is a serious risk that consumers may choose the wrong dependency.

Registry deprecation

Packagist marks the entire package as abandoned and names wire-elements/spotlight as its replacement. That is a direct dependency-maintenance risk even though the repository remains available.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although the release was recent, the lack of observed commit activity weakens confidence in ongoing maintenance.

Workflow audit

Both workflows were analyzed completely with no untrusted checkout or script-injection findings, but all five action references are unpinned and a high-confidence unpinned container image finding was reported. This is a meaningful workflow hygiene and build-reproducibility concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Philo Hermans

Direct Dependencies

Dependency	Last Release	Score
livewire/livewire Version ^3.0\|^4.0	—	—
illuminate/contracts Version ^8.0\|^9.0\|^10.0\|^11.0\|^12.0\|^13.0	—	—
spatie/laravel-package-tools Version ^1.4.3	—	—