udir-moodle/availability_role

Release historycaution

This is the package's first recorded release, so there is no release history or cadence to demonstrate maturity yet. The linked repository and complete package contents provide some compensating evidence.

Repo commit activitycaution

No commits or active maintainers were observed in the prior three months. Because the repository and release are newly observed, this is an abandonment concern but not evidence of a long-standing collapse.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. That is a modest repository hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow gives all workflows top-level write permission, uses both actions without pinning, and has a high-confidence template-injection finding. No untrusted checkout or script-injection trigger was found, so this is a workflow hygiene concern rather than a severe standalone risk.