oat-sa/extension-lti-test-review
Regular releases and three active contributors provide good continuity. The build uses Sonar and includes tests, though workflow credentials and unpinned actions leave a modest maintenance gap.
79%
Total Score
100
100
75
Health Score Breakdown
The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, although active maintenance and Sonar scanning partly reduce its practical impact.
All four workflows were analyzed with no untrusted checkouts or script injection, and no workflow grants top-level write access. However, all 7 action references are unpinned and a high-confidence medium-severity secrets-inherit finding gives reusable workflow steps broader credentials than necessary.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Open Assessment Technologies SA |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 oat-sa/generis Version >=15.22 | — | — |
oat-sa/tao-core Version >=56.7.0 | — | — |
oat-sa/extension-tao-lti Version >=15.4.1 | — | — |
oat-sa/extension-tao-outcome Version >=13.0.0 | — | — |
oat-sa/extension-tao-testqti Version >=50.4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 19 hours ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.