spatie/laravel-dashboard

Name lookalikedanger

The package name is flagged as resembling the far more established spatie/laravel-data, and borrows its identity despite low artifact overlap and no declared fork relationship. Consumers may most likely have intended the lookalike package instead.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months. This is a meaningful maintenance warning, although the package has a recent stable release and longer-term release history.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts, script injection, or audit findings. However, all eight action references are unpinned, which weakens build reproducibility; the absence of top-level permissions blocks is acceptable here because no risky trigger or write scope was observed.