udir-moodle/atto_poodll

Release historycaution

Only one registry release exists, published 96 days ago, so the Packagist release history provides little evidence of an established publishing track.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, leaving little evidence of current maintenance beyond its latest push.

Repo toolingcaution

The repository uses Composer, but no security-scanning tools were detected, leaving a modest gap in ongoing project hygiene.

Security policycaution

No security policy was found, reducing transparency for reporting and handling vulnerabilities, though this is not evidence that the package is unsafe by itself.

Workflow auditcaution

The sole workflow has a high-confidence template-injection finding, top-level write permissions, and two unpinned action uses. No untrusted checkout or dangerous trigger was observed, so these are workflow hygiene concerns rather than a standalone severe risk.