oat-sa/extension-lti-proctoring

Release historycaution

The package has existed since January 2017 with 69 releases, but only one release in the last 12 months despite the latest release being recent. This indicates a mature history with currently limited release activity.

Repo bus factorcaution

One contributor made all commits in the last three months, creating a concentrated maintenance dependency. Organization backing reduces handoff risk somewhat, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating limited recent development activity. The recent release partly offsets this, but the current maintenance pace remains thin.

Security policycaution

The repository has no published security policy. This is a transparency gap for a package providing proctoring functionality, although automated Sonar scanning provides partial compensating evidence.

Workflow auditcaution

All four workflows were analyzed with no dangerous trigger or untrusted checkout findings, but all seven action references are unpinned and a high-confidence medium-severity secrets-inherit finding affects the release workflow. These workflow weaknesses warrant caution despite the absence of high-severity findings.