The MIT license, included tests, release notes, and a linked repository make the package easier to evaluate and maintain. Pin this prerelease carefully because recent source activity is quiet and workflow references are unpinned.
61%
Total Score
50
88
50
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning for a framework integration package.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so there is no documented path for reporting vulnerabilities or communicating security handling.
This release is a prerelease, and 82% of recent releases are prereleases, so consumers should expect less stability than from a mature stable line.
The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, or audit findings. However, all 3 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ~10.0|~11.0|~12.0|~13.0 | — | — |
spatie/eloquent-sortable Version ^4.0|^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.