oat-sa/lib-lti1p3-core
The repository includes security scanning, a clear license, and release notes for this version. Five workflow references are unpinned and no security policy is published, leaving modest process gaps.
87%
Total Score
100
100
67
Health Score Breakdown
No repository security policy was found. For a library handling LTI authentication and JWT-related functionality, that is a modest transparency gap, although active scanning provides some compensation.
Both workflows were fully analyzed with no audit findings, dangerous triggers, untrusted checkouts, or script injection. However, all 5 action references are unpinned, which leaves a reproducibility and action-supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
psr/cache Version ^2.0 || ^3.0 | — | — |
nyholm/psr7 Version ^1.8 | — | — |
ramsey/uuid Version ^3.9 || ^4.7 | — | — |
lcobucci/jwt Version ^4.3 || ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.