danc0/dmerkle

Release historydanger

This is a single-release package first published in August 2022, with no releases in the last 12 months. That limited history and long gap reduce confidence in ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of releases since August 2022. This is a substantial abandonment concern, though the repository is not archived.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not decisive, but this provides little supporting evidence of broad use or community resilience.

Security policycaution

The repository has no security policy. For a library that handles Merkle proofs, this reduces disclosure transparency, although the package otherwise includes tests and a documented usage guide.

Workflow auditcaution

Both workflows use read-only permissions and had no high- or medium-confidence audit findings, which is positive. However, all four analyzed action references are unpinned, leaving avoidable build-integrity risk.