Broccoli plugin to merge multiple trees into one
62%
Total Score
67
100
88
67
The package has 30 releases since 2014, but its latest release was in March 2020 and there were no releases in the following 12 months of the collected history. This is a substantial maintenance concern for a dependency.
The repository recorded zero commits and zero active maintainers over the last three months, reinforcing the long release gap and indicating no current maintenance activity.
There was no issue or pull-request activity in the collected month, and 13 pull requests remain open. This is consistent with a project receiving little current attention.
The repository reports no build tool and no security-scanning tool. This is a modest hygiene gap, though the package is small and the workflow audit found no active high-risk findings.
The repository has no security policy. That weakens vulnerability-reporting transparency, even though it does not by itself show that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
merge-trees Version ^2.0.0 | — | — |
broccoli-plugin Version ^4.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.