sortablejs

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less transparent; the package's clear source repository partly offsets this.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning even though a recent registry release exists.

Repo issue activitycaution

Only one issue was opened and none closed in the last month, while 41 pull requests remain open and none were merged; this indicates a backlog and weak recent responsiveness.

Repo toolingcaution

The project uses Babel, Rollup, and npm scripts, showing an established build process, but no security-scanning tools were detected.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities are reported and handled.