nicmart/tree

Maintainerscaution

Two registry maintainers provide a modest publishing base; this is consistent with the linked repository being owned by the same individual, but it leaves limited visible redundancy.

Project backingcaution

The registry namespace and repository owner match, but both are tied to a single user rather than an organization, so institutional backing is limited.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which is a maintenance concern; however, the same assessment records a current release and recent merged pull requests, partly compensating for the quiet commit window.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations unclear.

Token permissionscaution

All 3 workflows lack top-level token permissions declarations. No workflow declares top-level write access, but explicit least-privilege configuration is still missing.