spatie/or-else

Name lookalikedanger

The signal identifies strong borrowed identity for a package resembling spatie/regex, despite zero artifact overlap and no README claim of being a fork. Consumers could select this package when they intended the much more established lookalike.

Release historydanger

Only two releases were published, with the latest in June 2015 and none in the last eleven years. That makes ongoing compatibility and maintenance uncertain.

Repo commit activitydanger

There were no commits or active maintainers in the last three months. Combined with the stale registry release history, this indicates limited current maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tooling is present. This is a hygiene gap rather than proof of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.