vhood/tree-converter

Release historycaution

The package has 13 releases, but its latest release was in December 2022 and it has had no releases in the last 12 months, indicating prolonged inactivity.

Repo toolingcaution

The repository uses Make and Composer for builds, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

No security policy was found in the repository, so users have no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

Both workflows were fully analyzed with no audit findings or dangerous triggers, but all 6 action references are unpinned, which weakens build reproducibility and action supply-chain control.