spatie/laravel-float-sdk

Documentation, licensing, and repository ownership are clear, with tests and release notes maintained in the source project. Recent commit activity is absent, and workflow references are entirely unpinned, adding maintenance and build-integrity concerns.

Latest 1.0.1

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The signal reports that the package borrows the identity of the much more established spatie/laravel-data, with the lookalike having 2,901,739 monthly downloads versus zero for this package; despite zero artifact overlap, this is a serious adoption and identity risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, a concrete sign that development activity has recently stalled.

Security policy

The repository has no published security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow audit

All 12 analyzed action references are unpinned, and three workflows grant top-level write access; however, the pull_request_target workflow has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than an acute workflow hazard.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Niels Vanpachtenbeke

Tim Van Dijck

Direct Dependencies

Dependency	Last Release	Score
illuminate/contracts Version ^11.0\|^12.0	—	—
saloonphp/laravel-plugin Version ^3.0	—	—
saloonphp/pagination-plugin Version ^2.0	—	—
spatie/laravel-package-tools Version ^1.16	—	—