spatie/nova-translatable

Name lookalikedanger

The signal says this package borrows the identity of the much larger spatie/laravel-data package, despite zero artifact overlap and no README identification as a fork; consumers may have intended the lookalike instead.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, a meaningful sign of currently quiet development capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository-hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts or script injection, but all four action references are unpinned and a high-confidence audit found an unpinned container image, weakening build reproducibility.