spatie/laravel-auto-discoverer

Name lookalikedanger

The package borrows the identity of the much larger spatie/laravel-package-tools package, which has far more downloads and stable releases; consumers may have intended that established package instead.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, which weakens the otherwise recent release evidence and raises maintenance concern.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, leaving uncertainty about whether the repository directly belongs to this release despite the shared Spatie organization backing.

Security policycaution

The linked repository has no security policy. This is a transparency gap, though the available repository and workflow evidence provide some compensating visibility.

Workflow auditcaution

All four workflows were analyzed without untrusted triggers or script-injection findings, but all 10 action references are unpinned and a high-confidence audit finding identified an unpinned container image.