The more dependencies your project has, the higher your risk of supply-chain attack is, and the less you're aware of what code is actually running.
My recommendation: Replace simple dependencies with your own versions.
https://securinglaravel.com/security-tip-replace-simple-dependencies/
