jorisdugue/h5p-bundle

Release historycaution

The package has 36 releases since December 2019, but none in the last 12 months; its latest release was in February 2025. That long recent gap lowers confidence in ongoing maintenance despite the historically regular cadence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is direct evidence of currently limited maintenance activity, though the repository is not archived.

Security policycaution

The linked repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, although it does not by itself show that the package is unsafe.

Workflow auditcaution

All 9 analyzed action references are unpinned, which weakens workflow reproducibility and supply-chain hygiene. No untrusted checkouts, script injection, dangerous triggers, or audit findings were reported, so this is caution rather than danger.