spatie/array-functions

Name lookalikedanger

The package is reported as borrowing the identity of the much more established spatie/laravel-ignition, with far higher downloads and more stable releases. That identity signal makes consumers more likely to choose the lookalike accidentally, despite zero artifact overlap.

Release historycaution

There have been no registry releases in roughly 19 months, although the package has a long history and 15 releases overall. The recent pause is a maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. A recent repository push provides some counterevidence, but the observed development activity remains quiet.

Workflow auditcaution

Both workflows were analyzed successfully and have no untrusted checkouts or script injection, but all four action references are unpinned and a high-confidence unpinned container image was found. This weakens build reproducibility without making the package unfit by itself.