locr-company/splay-tree
The package has clear documentation, tests, a license, and a small runtime dependency footprint. Workflow pinning and the lack of a security policy leave avoidable maintenance and review gaps.
67%
Total Score
50
100
94
75
Health Score Breakdown
Only 3 releases have appeared over roughly 3 years and 7 months, with no release in the last 12 months; this suggests a slow or stalled release cadence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which weakens evidence of active maintenance.
The repository has no security policy, so users have no documented vulnerability-reporting path.
The audit covered all 3 workflows with no dangerous findings, read-only or job-level permissions in the observed workflows, and no untrusted trigger sinks. However, 7 of 9 action references are unpinned, leaving a supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ringo Leese |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.