spatie/laravel-pjax

Name lookalikedanger

The package is flagged as borrowing the identity of the much more downloaded spatie/laravel-data, with borrows_lookalike_identity true. Although artifact overlap is zero and the repository matches this package, the identity signal remains a serious adoption risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. A recent push exists in repository_archived, but the provided activity window still shows no demonstrated ongoing development.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. The package's clear repository and license provide some broader project transparency but do not replace this process.

Workflow auditcaution

All 7 action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in php-cs-fixer.yml. No untrusted checkouts or script injection were found, limiting the concern to workflow supply-chain hygiene.