oat-sa/lib-lti1p3-proctoring
Tests, release notes, and security tooling provide useful support. The project is backed by an organization, but the last registry release was over a year ago, recent work has one contributor, and all five workflow actions are unpinned.
68%
Total Score
67
100
94
75
Health Score Breakdown
The package has 10 releases over roughly five years, but it has had no registry release in the last 12 months; this weakens evidence of ongoing published maintenance.
All recent commit activity comes from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown.
Only one commit was recorded in the last three months, indicating very limited recent development activity.
No repository security policy was found, leaving vulnerability reporting and response expectations less transparent.
Both workflows were analyzed cleanly with no dangerous triggers, untrusted checkouts, or audit findings, but all five action references are unpinned, leaving build inputs less reproducible.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nyholm/psr7 Version ^1.8 | — | — |
nesbot/carbon Version ^2.72 || ^3.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
oat-sa/lib-lti1p3-core Version ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.