spatie/laravel-stubs

Name lookalikedanger

The package borrows the identity of the much more popular spatie/laravel-data and is not described as a fork; consumers may most likely have wanted that package instead.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of current maintenance despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

The audit analyzed only two of three workflows and one file failed analysis. All six action references are unpinned, and one workflow has top-level write permissions; no untrusted checkout or script-injection sink was found.