oddvalue/eloquent-sortable

Release historycaution

The package has existed for about four years but only five releases, with roughly one release in the last 12 months and a median interval of about 12 months. This indicates a slow maintenance cadence, though the assessed version is recent.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The recent push and current release partly offset this, but the short-term maintenance lull remains a concern.

Workflow auditcaution

All 13 analyzed action references are unpinned, and one workflow has top-level write permissions; the audit also found a high-confidence bot-condition issue. No untrusted checkout or script-injection sink was found, so this is workflow hygiene risk rather than a severe dependency risk.