spatie/symfony-ignition-bundle

Name lookalikedanger

This package borrows the identity of spatie/ignition, which has far more downloads and stable releases; the indicator explicitly marks borrows_lookalike_identity as true. That is strong evidence consumers may have intended the established package instead.

Security policycaution

No repository security policy was found, which slightly reduces disclosure transparency. This is a hygiene gap rather than evidence of abandonment or unsafe code.

Workflow auditcaution

All 8 action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in php-cs-fixer.yml. The pull_request_target workflow has no untrusted checkout or script-injection sink, which limits the broader workflow risk.