humanmade/quiz-block

Release historycaution

This package is extremely new, with two releases arriving about 13 minutes apart and no longer-term release record, so maintenance maturity is not yet demonstrated.

Repo popularitycaution

The repository has one star and no forks or watchers, offering little community validation; this is supporting evidence only and does not outweigh the active organizational backing.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency gap for a package with build workflows.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear.

Workflow auditcaution

All three workflows were analyzed with pinned actions and no untrusted checkout or script-injection trigger, but the audit found three high-confidence template-injection findings in the release workflow; this is a workflow hygiene concern, not a standalone unfitness signal.