bentools/treerex
The package includes tests, a readable README, release notes, and a matching source repository, which provide useful consumer and project context. Its single alpha release, no commits in the last three months, absent security policy, and fully unpinned workflow references leave maintenance and build hygiene unproven.
62%
Total Score
50
86
67
Health Score Breakdown
This is the package's only release, published 202 days ago, so there is little release history to demonstrate sustained maintenance.
There were zero commits and zero active maintainers in the last three months; for a package only 202 days old, this leaves ongoing maintenance unproven rather than proving abandonment.
The repository has no security policy, leaving no documented channel or process for handling vulnerabilities in a dependency used for decision logic.
The latest and only version is the alpha prerelease 1.0-alpha1, which signals an immature API and higher change risk for dependents.
The complete workflow audit found no dangerous sinks or high-severity findings, but all five action references are unpinned, weakening build reproducibility and update control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Benoit POLASZEK |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^7.3|^8.0 | — | — |
psr/container Version ^2.0 | — | — |
symfony/options-resolver Version ^7.3|^8.0 | — | — |
symfony/expression-language Version ^7.3|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 6 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.