hguenot/data-tree
The artifact is licensed, documented, tested, and has a small runtime dependency surface. It has no install scripts and the repository matches the package, reducing adoption and provenance concerns. The missing security policy and scanning reduce transparency somewhat.
58%
Total Score
50
100
75
75
Health Score Breakdown
The package has had no release in nearly eight years: its latest release was October 2018, despite a stable v1.1.2 version. This is a substantial maintenance concern for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that is no longer actively maintained. Its last push was in May 2020, which does not compensate for the prolonged inactivity.
Composer is used as a build tool, which fits the package ecosystem. No security scanning tooling is present, leaving a modest process gap.
The repository has no security policy and no security scanning tools. These omissions reduce transparency and the evidence of an established security-maintenance process.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.