toolkito/larasap

Registry deprecationdanger

Packagist marks the entire package as abandoned and recommends owlstack/owlstack-laravel as a replacement. This is a direct warning against taking a new dependency on this package.

Release historydanger

The package has six releases but none in the last 12 months; its latest registry release was published in October 2018. The old release cadence materially increases compatibility and abandonment risk.

Repo bus factorcaution

All five recent commits came from one contributor, so maintenance depends on a single active person. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no security policy. For a package integrating with social-network APIs, this is a meaningful transparency and vulnerability-reporting gap.

Workflow auditcaution

Both workflows were analyzed without audit findings or unsafe-trigger sinks, but all five action references are unpinned and one workflow grants top-level write permissions. These are workflow hygiene and supply-chain risks, though not severe on their own.