adamjenkins/moodle-local_forumcare

Repo bus factorcaution

One contributor made 100% of the 14 commits in the last three months. That creates a meaningful continuity risk if the maintainer becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and maintenance gap rather than evidence of a malicious package.

Security policycaution

The repository has no security policy, leaving no documented process for reporting and handling vulnerabilities.

Workflow auditcaution

The audit analyzed all three workflows with no high-confidence findings or untrusted checkout and script-injection paths. However, all five action references are unpinned, and one workflow grants top-level write permissions, creating avoidable supply-chain and token-scope hygiene risk.