spatie/laravel-json-api-paginate

Name lookalikedanger

The indicator reports that this package borrows the identity of spatie/laravel-ignition, which has far more downloads and stable releases, and is not described as a fork. Consumers most likely wanted spatie/laravel-ignition, making this a severe package-selection risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanner is a transparency gap, though it does not outweigh the repository's other maintenance evidence.

Security policycaution

The repository has no published security policy. That weakens vulnerability-reporting transparency, although it is not evidence that the package is unmaintained.

Token permissionscaution

All three workflows lack top-level permissions declarations, so their effective token access is less explicit than ideal. No workflow requests top-level write permissions, which partly limits the concern.