spatie/laravel-mailcoach-sendinblue-feedback

Name lookalikedanger

The package is reported to borrow the identity of spatie/laravel-login-link, which has far more downloads and stable releases; although artifact overlap is zero, this naming signal creates a serious risk that consumers may choose the wrong package.

Dangerous workflowscaution

The repository has one pull_request_target workflow, which can require careful review because it runs with elevated event context, but no untrusted checkout or script-injection patterns were detected.

Licensecaution

No declared license or license file was found in the package or repository, leaving the terms for using and redistributing this dependency unclear.

Release historycaution

The package has five releases, but its latest registry release was about 3 years and 5 months ago, with no releases in the last 12 months; this weakens confidence in ongoing compatibility maintenance.

Security policycaution

The repository has no security policy, reducing transparency for vulnerability reporting, though this is not by itself evidence of abandonment.