teltek/pumukit-opencast-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful recent maintenance gap, although the package has released three times in the last year.

Repo popularitycaution

The repository has only 1 star and 1 fork, providing little community support evidence. Popularity is supporting evidence rather than a verdict, so this is a modest concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens repository hygiene without proving the release is unsafe.

Security policycaution

The repository has no security policy. This reduces disclosure transparency and maintainer guidance, though it does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection path, but it uses an unpinned container image with high confidence. That leaves the build exposed to mutable external image changes.