tree-kill

kill trees of processes

Latest 1.2.2

NPM

57%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Attestations

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with the old latest release, this is the strongest abandonment concern in the collected evidence.

Build provenance

No build attestation or trusted-publisher provenance is present. This is a transparency gap, but for this small, directly structured package it is not severe enough to determine the health band alone.

Release history

The package has 13 releases since April 2013, but its latest release was in December 2019 and there were no releases in the last 12 months. This is a meaningful maintenance concern for a dependency.

Repo issue activity

The repository has 20 open issues and 4 open pull requests, while none were closed or merged in the last month. This suggests limited responsiveness alongside the broader maintenance slowdown.

Repo tooling

The repository uses no build tooling and has no security scanning tools. The simple package structure makes the lack of a build system less concerning, but the absent security scanning reduces maintenance transparency.

Vulnerabilities

Title	Versions	Severity
CVE-2019-15598 tree-kill is vulnerable to Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in versions 0.0.0 - 1.2.2.	0.0.0 - 1.2.2	Critical
CVE-2019-15599 tree-kill is vulnerable to Improper Control of Generation of Code ('Code Injection') in versions 0.0.0 - 1.2.2.	0.0.0 - 1.2.2	Critical