lukascivil/treewalker

Release historycaution

The package has existed for over 10 years with seven releases and one release in the last 12 months, indicating a modest but continuing release cadence.

Repo commit activitycaution

No commits or active maintainers were recorded during the last three months, which weakens evidence of ongoing maintenance despite the recent release and repository push.

Security policycaution

The repository has no security policy, leaving vulnerability reporting expectations undocumented; this is a transparency gap rather than evidence of unsafe code.

Workflow auditcaution

All five analyzed action references are unpinned, weakening build reproducibility. The release workflow has top-level write permissions, but no untrusted checkout or script-injection sink was found, so this is not a severe workflow risk.