oat-sa/imsglobal-lti
It has a clear license, minimal runtime dependencies, and organization-backed ownership. The long release gap, no recent commits, absent security policy, and entirely unpinned workflow actions weaken confidence in ongoing maintenance and build hygiene.
58%
Total Score
75
100
94
67
Health Score Breakdown
The latest release was published in July 2022, with no releases in the last 12 months. Four releases show some history, but the prolonged gap materially raises maintenance risk.
The repository recorded zero commits and zero active maintainers in the last 3 months. A push in April 2024 shows it was not always dormant, but current activity is absent.
The linked repository has no security policy. This is a transparency gap for a library handling LTI and OAuth-related functionality, with no provided evidence compensating for it.
All three workflows were analyzed successfully and have no reported dangerous findings or untrusted triggers, but all 7 action references are unpinned, leaving build inputs less reproducible.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Open Assessment Technologies S.A. |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.