oat-sa/extension-tao-itemqti-pci
The repository has no security policy, and all seven workflow actions are unpinned; one reusable workflow also inherits secrets. It is organization-backed, includes tests, and uses Sonar scanning.
82%
Total Score
100
100
100
83
Health Score Breakdown
No security policy was found in the repository. This weakens vulnerability-reporting transparency, though active maintenance and automated scanning partly compensate.
All four workflows were analyzed with no untrusted checkout or script-injection paths, and none grants top-level write access. However, all seven action references are unpinned and a high-confidence medium-severity finding shows secrets inherited by a reusable workflow, creating real workflow hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Open Assessment Technologies SA |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 oat-sa/generis Version >=15.22 | — | — |
oat-sa/tao-core Version >=54.0.0 | — | — |
oat-sa/extension-tao-itemqti Version >=29.13.0 | — | — |
oat-sa/oatbox-extension-installer Version ~1.1||dev-master | — | — |
Weekly Downloads
Info
- Last Published
- 21 days ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.