spatie/eloquent-sortable

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. This is a maintenance concern, although the recent registry release and repository push provide some compensating evidence.

Security policycaution

No repository security policy was found. This is a transparency gap, though it is less significant for a small Laravel library than for a security-sensitive service.

Workflow auditcaution

All four workflows were analyzed, with no untrusted checkout or script-injection findings. However, the audit found one high-confidence unpinned container image and all eight action references are unpinned, creating a supply-chain hygiene concern.