oat-sa/lib-lti1p3-basic-outcome

Release historycaution

The package has 14 releases since December 2020, but none in the last 12 months; the latest release was over a year ago. Its established history helps compensate, but the current release gap raises maintenance concerns.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with more than a year without a release. This is a meaningful sign of slowed maintenance, though the project is not archived.

Security policycaution

No repository security policy was found. This is a transparency and vulnerability-reporting gap, but it is not severe enough to outweigh the package's other evidence on its own.

Workflow auditcaution

Both workflows were analyzed with no untrusted checkouts, script injections, or audit findings, and no workflow grants top-level write access. However, all five action references are unpinned, which weakens build reproducibility and requires caution.