hughcube/htree

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the latest push coincides with this release, the recent activity gap limits confidence in ongoing maintenance.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of broad community support.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.

Security policycaution

The repository has no security policy. This is a maintenance and disclosure gap, though it is not evidence that the release is unsafe by itself.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, weakening build reproducibility and supply-chain hygiene.