oat-sa/extension-tao-itemqti-pic
Workflow hygiene needs attention because all seven actions are unpinned and a release workflow inherits secrets. There is also no published security policy, although organization backing and security scanning provide some reassurance.
82%
Total Score
100
100
100
75
Health Score Breakdown
No repository security policy was found, leaving vulnerability-reporting expectations undocumented; Sonar scanning partly compensates for this transparency gap.
All seven analyzed action references are unpinned, and the audit found a high-confidence medium-severity secrets-inherit issue in the release workflow. No untrusted checkouts, script injection, dangerous triggers, or top-level write permissions were found, limiting the impact to a hygiene caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Open Assessment Technologies |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 oat-sa/generis Version >=15.22 | — | — |
oat-sa/tao-core Version >=54.0.0 | — | — |
oat-sa/extension-tao-itemqti Version >=30.0.0 | — | — |
oat-sa/oatbox-extension-installer Version ~1.1||dev-master | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.