elbgoods/laravel-sort-positions-rule

Release historydanger

Only two releases were published, with the latest about six years ago and no releases in the last 12 months. This is strong evidence of limited ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly six-year-old last release and indicating likely abandonment.

Lifecycle scriptscaution

Composer post-install and post-update scripts run during dependency operations, adding execution surface for consumers. No provided signal shows these scripts are unnecessary or risky, so this remains a modest concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanner is a hygiene gap rather than evidence that the package is unsafe.

Workflow auditcaution

Both workflows were analyzed without high-confidence findings or untrusted triggers, but all four referenced actions are unpinned. The absence of top-level permissions is acceptable on its own, while unpinned actions are a supply-chain hygiene concern.