udir-moodle/mod_learningmap

Release historycaution

The registry shows only one release, published today, so there is no release track record yet. This limits confidence in long-term maintenance despite the linked repository and organization backing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Because the package is newly published, this may reflect limited observation time, but it leaves maintenance capacity unproven.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. The missing scanning coverage is a modest transparency and hygiene concern.

Security policycaution

The repository has no security policy. That reduces vulnerability-reporting transparency, though it is not by itself evidence of abandonment.

Workflow auditcaution

The single workflow uses top-level write permissions and both action references are unpinned; the high-confidence template-injection finding is a hygiene concern, but no untrusted checkout or script-injection path was detected. The audit completed for all workflows.