lav45/sort-list

Release historydanger

The package has had only two releases, with the latest published over 11 years ago and none in the last 12 months; this strongly indicates stale maintenance for a dependency.

Repo commit activitydanger

There were no commits and no active maintainers in the past three months, consistent with the package's long release hiatus and increasing abandonment risk.

Project backingcaution

The package and repository are owned by the same individual account, providing direct ownership alignment but no organizational backing to reduce the thin-maintainer risk.

Repo popularitycaution

The repository has zero stars, one fork, and one watcher, providing little evidence of a broad user or contributor base; this is supporting evidence rather than a verdict.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a modest transparency gap, not a severe dependency risk on its own.