directorytree/git

It includes a clear MIT license, tests, release notes, focused dependencies, and an organization-backed repository. Maintenance has gone quiet since 2024, and the workflow uses three unpinned actions without a security policy.

Latest v1.1.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases have been published since October 2020, with no releases in the last 12 months and a median interval of about 3 years 5 months. The long release gaps lower confidence in active maintenance, though the latest release is stable and documented.

Repo commit activity

There were zero commits and zero active maintainers in the last 3 months. Combined with no releases in the last 12 months, this indicates currently inactive maintenance rather than merely a small contributor base.

Repository archived

The linked repository is not archived, but its last push was on April 2, 2024. The unarchived state preserves adoption potential, while the old activity date aligns with the maintenance concern.

Security policy

The repository has no security policy. That is a transparency gap for reporting and handling vulnerabilities, although it is not by itself evidence of unsafe code.

Workflow audit

The single workflow was fully analyzed with no untrusted checkouts, script injection, or high-severity findings. However, all three action references are unpinned, leaving the build exposed to upstream action changes.