graymatterlabs/pingtree

A Ping Tree is a process in which a single lead is offered to multiple buyers in real-time and sold to the highest bidder

Latest v0.2.0.2

Packagist

54%

Total Score

caution

Usable with caveats: no releases since February 2023 and workflow audit findings raise maintenance and build-risk concerns.

Health Score Breakdown

Release history

The package has made no registry release in more than three years, despite five releases during its first several months. That long gap is a meaningful maintenance concern.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. This increases the risk that fixes or compatibility updates will not arrive promptly.

Security policy

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although the repository does use Dependabot security tooling.

Version stability

The assessed version is not a prerelease, but it remains below a stable major version. That warrants some compatibility caution, though it is outweighed by the clearer maintenance signals.

Workflow audit

All 11 action references are unpinned, and the audit reports high-confidence findings for a spoofable bot condition and an unpinned container image. The pull request target workflow has write permissions, but no untrusted checkout or script injection was detected, limiting the severity.