creativecrafts/laravel-sort-collection
The package is licensed, documented, and backed by an organization with repository tests, release notes, and dependency scanning. Maintenance has gone quiet, while all workflow actions are unpinned and a high-confidence bot-condition issue remains in an auto-merge workflow.
60%
Total Score
75
100
94
50
Health Score Breakdown
The package has seven releases since January 2023, but the latest release was in March 2025 and there were no releases in the last 12 months. That is a meaningful maintenance concern for a framework integration.
There were no commits and no active maintainers during the last three months. Combined with no releases in the last 12 months, this indicates currently quiet maintenance.
The repository has no security policy. This is a modest transparency gap for reporting vulnerabilities, but it is not by itself evidence that the package is unsafe to depend on.
All 12 analyzed action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection findings, so the workflow evidence warrants caution rather than a severe penalty.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Godspower Oduose |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version ^11.0|^10.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.