Package Health/oat-sa/extension-tao-test-runner-plugins

oat-sa/extension-tao-test-runner-plugins

This is a healthy, mature release suitable for dependency use. It has been maintained since 2017 with 135 releases, 18 releases in the last 12 months, a stable non-prerelease version, and a release as recent as the assessment date. The repository is active, unarchived, organization-backed, has three active contributors with no severe concentration, automated build and Sonar security tooling, tests, and eight merged pull requests in the last month. The main concerns are the absent security policy and the lack of explicit top-level GitHub Actions permissions, which reduce repository-security transparency, but the workflows showed no analyzed dangerous patterns and no top-level write permissions.

Latest v4.2.3

Packagist

91%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Security policy

The repository has no security policy, leaving vulnerability-reporting and security-response procedures undocumented.

Token permissions

All four workflows lack top-level token permissions declarations. Although none declares top-level write permissions, the absence of explicit least-privilege settings is a repository-security hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Open Assessment Technologies SA

Direct Dependencies

Dependency	Last Release	Score
oat-sa/generis Version >=17.0.0	—	—
oat-sa/tao-core Version >=56.0.0	—	—
oat-sa/extension-tao-test Version >=15.0.0	—	—
oat-sa/extension-tao-testqti Version >=49.1.1	—	—
oat-sa/extension-tao-delivery Version >=15.0.0	—	—