udir-moodle/filter_syntaxhighlighter

Release historycaution

Only one release has been published, with no demonstrated release cadence yet; this limits maturity evidence for a package intended as a dependency.

Repo bus factorcaution

All recent activity comes from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, so current maintenance capacity is demonstrated only weakly.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow has a high-confidence template-injection finding, top-level write permissions, and two unpinned action references. No untrusted checkout or dangerous trigger was reported, so this is a hygiene concern rather than a severe standalone risk.