This release is usable and has several strong health indicators: it is not deprecated or archived, uses a stable version, includes a README, tests, changelog, and a complete-looking Moodle plugin tree, and is backed by an organization-owned repository. However, the package is young at 78 days, repository activity over the last three months consists of only one commit from one contributor, and the repository has no security scanning or security policy. The workflow's top-level write permission and the repository's zero-star, zero-fork profile add transparency and maintenance concerns, though they do not by themselves make the package unfit to depend on.
68%
Total Score
63
100
83
80
The package is only 78 days old with four releases and a median interval of about 34 days, showing some release activity but limited evidence of long-term maintenance.
All recent commit activity is concentrated in one contributor, creating a maintenance single point of failure. The organization-owned repository provides some capacity to hand off work, so this is a caution rather than a severe risk.
Only one commit was recorded in the last three months, from one active maintainer, which is thin evidence of ongoing maintenance despite the recent push and release activity.
There are no open issues or pull requests and no issue or pull-request activity in the last month; this may reflect a quiet project, but it provides little evidence of an engaged maintenance process.
The repository has zero stars, forks, and watchers. This is weak supporting evidence and limits external validation, although popularity alone is not decisive for a specialized Moodle plugin.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
moodle/moodle Version 4.5.* || 5.0.* || 5.1.* || 5.2.* | — | — |
composer/installers Version ~1.0 || ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.