oat-sa/extension-tao-lti

Security scanning is present, and the package has a clear README, tests, and release notes. Pin workflow actions and narrow inherited secrets before production use.

Latest v19.2.0

Packagist

82%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unclear despite the presence of Sonar scanning.

Workflow audit

All four workflows were analyzed without untrusted checkouts or script injection, but all seven action references are unpinned and a high-confidence medium-severity finding reports inherited secrets in the release workflow.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Open Assessment Technologies S.A.

Jérôme Bogaerts

Joel Bout

Bertrand Chevrier

Lionel Lecaque

Patrick Plichart

Dieter Raber

Somsack Sipasseuth

Direct Dependencies

Dependency	Last Release	Score
oat-sa/generis Version >=17.0.0	—	—
oat-sa/tao-core Version >=56.11.0	—	—
guzzlehttp/guzzle Version ^6.5 \|\| ^7.0	—	—
oat-sa/lib-lti1p3-ags Version ~2	—	—
oat-sa/lib-lti1p3-core Version ~7.2	—	—