simonschaufi/laravel-dkim

Name lookalikecaution

The package is reported to borrow the identity of simonschaufi/pretty-xml, a different package with substantially more monthly downloads, although artifact overlap is zero and the README does not identify it as a fork. This creates a naming-transparency concern but not evidence that the artifact is a copy.

Release historycaution

The package has existed since April 2020 with 13 releases, but only one release appeared in the last 12 months and the median interval is about 161 days, indicating a slow maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the current release is recent, this provides limited evidence of ongoing maintenance between releases.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tooling is present. This is a modest transparency and assurance gap for a package handling email signing configuration.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.