spatie/laravel-dynamic-servers

Name lookalikedanger

The package borrows the identity of the much more established spatie/laravel-query-builder: borrows_lookalike_identity is true, despite zero artifact overlap. Consumers may have intended to install the lookalike package instead.

Release historycaution

The package has 11 releases since August 2022, but none in the last 12 months; the latest release was on May 10, 2024. This indicates a meaningful maintenance gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository is not archived, current development activity is absent.

Security policycaution

The linked repository has no security policy. This reduces transparency for reporting vulnerabilities, though Dependabot provides some compensating security tooling.

Workflow auditcaution

All 9 analyzed action references are unpinned, and one workflow grants top-level write permissions. The pull_request_target workflow has no untrusted checkout or script-injection sink, so this is workflow hygiene rather than a severe risk.