directorytree/runnable

Release historycaution

This is the first release, published today, so there is no release track record or established cadence yet. That limits confidence in long-term maintenance but does not by itself indicate abandonment.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, but the package itself was released today, making the absence of historical activity primarily a maturity gap rather than evidence of a collapsed project.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest repository hygiene gap, not a standalone dependency risk.

Security policycaution

The repository has no security policy. For a new package this reduces disclosure transparency, though it is not evidence that the release is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted-code sinks. Both action references are unpinned, which leaves build inputs less reproducible and is a minor supply-chain hygiene concern.