oat-sa/extension-tao-resource-workflow
It has a long release history, a current stable release, tests, and organizational ownership. The workflow avoids untrusted triggers and has no high-severity findings, though its credential handoff needs care.
72%
Total Score
67
92
50
Health Score Breakdown
The package has existed for about 9 years with 27 releases, but only one release in the last 12 months; the latest release is recent, so this suggests slow rather than absent maintenance.
One contributor made all commits in the last 3 months. Organization ownership provides some handoff capacity, but no second active contributor is shown.
Only one commit was recorded in the last 3 months, indicating limited recent development activity despite the current release.
The repository has no security policy, which reduces transparency for reporting and handling security issues.
All 7 analyzed action references are unpinned, and a high-confidence medium-severity secrets-inherit finding passes credentials to a reusable workflow. There are no untrusted checkouts, injection findings, or high-severity issues, limiting the impact to build hygiene rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Open Assessment Technologies SA |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 oat-sa/generis Version >=15.22 | — | — |
oat-sa/tao-core Version >=50.24.6 | — | — |
oat-sa/oatbox-extension-installer Version ~1.1||dev-master | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.