alto/tree

Release historycaution

The package is 245 days old but has only one release, leaving little evidence of an established release track record.

Repo bus factorcaution

One contributor made all recent commits, concentrating maintenance responsibility despite the organization-owned repository.

Repo commit activitycaution

The repository had only two commits in the last three months, indicating limited recent maintenance activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository hygiene gap.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no high- or medium-confidence findings; however, all three action references are unpinned, weakening build reproducibility.