owlstack/owlstack-laravel

Registry deprecationdanger

Packagist marks the package deprecated at package scope and identifies fopost/social-laravel as the replacement. This is a severe adoption concern even though the linked repository remains active.

Repo bus factorcaution

All 4 commits in the last 3 months came from one contributor. Organization backing provides some handoff capacity, but no second recent contributor is shown.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention owlstack/owlstack-laravel. That creates a meaningful possibility that the package is linked to the wrong or repurposed repository.

Security policycaution

The linked repository has no security policy. This is a transparency gap for a Laravel integration that handles social-platform credentials, although it is not evidence of a security defect by itself.

Workflow auditcaution

The audit completed cleanly with no untrusted checkout or script-injection findings, but all 5 action references are unpinned and one release workflow grants top-level write access. With no untrusted trigger or sink, this remains workflow hygiene rather than a severe risk.