spatie/laravel-feed

The project has a clear README, tests in its repository, an MIT license, and a recent release supporting Laravel 13. No commits were recorded in the last three months, and its workflows use unpinned images and actions; verify the package identity carefully before adopting it.

Latest 4.5.0

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package is flagged as borrowing the identity of the much more downloaded spatie/laravel-data, with borrows_lookalike_identity true. Although artifact overlap is 0 and the README does not claim to be that package, this remains a serious consumer-confusion risk.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last three months. A release on 2026-02-21 shows the project is not abandoned, but the recent inactivity still weakens evidence of ongoing maintenance.

Security policy

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it is partly offset by the repository's established ownership and recent release.

Workflow audit

All 7 action references are unpinned, and a high-confidence audit found an unpinned container image in php-cs-fixer.yml. The audit completed for all three workflows and found no untrusted checkout or script-injection paths, limiting the concern to workflow reproducibility and hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jolita Grazyte

Freek Van der Herten

Sebastian De Deyne

Patrick Organ

Direct Dependencies

Dependency	Last Release	Score
illuminate/http Version ^11.0\|^12.0\|^13.0	—	—
illuminate/support Version ^11.0\|^12.0\|^13.0	—	—
illuminate/contracts Version ^11.0\|^12.0\|^13.0	—	—
spatie/laravel-package-tools Version ^1.15	—	—