udir-moodle/format_tiles

Release historycaution

This is the package's first registry release, published today, so there is no release track record yet. That limits evidence of maturity but does not indicate abandonment by itself.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was detected. The missing scanning is a modest repository hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, not evidence that the package is unsafe.

Workflow auditcaution

The only workflow grants top-level write permissions and uses both actions without pinning; the audit also reports a high-confidence template-injection finding. No untrusted checkout or script-injection trigger was found, so this is a workflow hygiene concern rather than a severe dependency verdict.