spatie/flare-debug-sender

Name lookalikedanger

The package is flagged as borrowing the identity of the much more downloaded spatie/url, with borrows_lookalike_identity true. Although artifact overlap is 0 and the README identifies this package, the identity confusion remains a serious adoption risk.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the past three months. The recent push and release history provide some evidence of activity, but do not offset this current inactivity fully.

Security policycaution

The repository has no security policy. Dependabot is enabled, which provides some security process coverage, but disclosure guidance is still missing.

Workflow auditcaution

All 8 action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image. A pull_request_target workflow has no untrusted checkout or script-injection finding, but three workflows grant top-level write permissions.