rc-tree

Release historycaution

The package has a long history with 316 releases, but it has had no registry release in the last 12 months. Active repository commits partly compensate for the release pause, making this a maintenance caution rather than abandonment evidence.

Security policycaution

No repository security policy was found, which leaves vulnerability-reporting expectations less clear, though active security scanning provides some compensation.

Workflow auditcaution

All four workflows were analyzed with no audit findings or untrusted checkout and script-injection paths. Three workflows use top-level write permissions and four of six action references are unpinned, creating a mild workflow-hygiene caution.