Package Health/adamjenkins/moodle-mod_confsubmissions

adamjenkins/moodle-mod_confsubmissions

The package has tests, a changelog, a clear license, and 71 recent commits from two active contributors. Its repository is small and lacks a security policy, while workflow actions are not pinned, so maintenance and build-integrity safeguards remain limited.

Latest v0.1.2

Packagist

73%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, both published on the same day, so there is very little release history from which to judge long-term stability. Recent repository activity partly compensates for the package's limited age.

Repo tooling

Composer is used for builds, but no security-scanning tooling is reported. This is a modest transparency and maintenance gap, not evidence of an unsafe release by itself.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a hygiene gap for a Moodle activity handling user submissions.

Version stability

Version v0.1.2 is pre-1.0, which signals an immature compatibility contract, although it is not marked as a prerelease and the recent development activity is substantial.

Workflow audit

Both workflows were analyzed successfully and no high-confidence audit findings or untrusted checkouts were reported. However, all five action references are unpinned and one workflow grants top-level write access, weakening build reproducibility and least-privilege hygiene.