spatie/laravel-url-signer

Name lookalikedanger

The package is flagged as borrowing the identity of spatie/laravel-query-builder, which has far more downloads and stable releases. Although artifact overlap is zero and the repository identifies the package clearly, the naming evidence creates a serious adoption risk because consumers may have intended the lookalike package.

Release historycaution

The package has existed since 2015 with 23 releases, but only one release appeared in the last 12 months and the median interval is about six months. This suggests slower maintenance, though the recent release provides some evidence of continued support.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The recent package release and repository push date provide some continuity, but current development activity is limited.

Workflow auditcaution

All three workflows were analyzed without untrusted checkouts or script injection, but all eight action references are unpinned. The clean audit reduces immediate workflow concern, while unpinned dependencies leave a reproducibility and maintenance gap.