Package Health/udir-moodle/qtype_shortanswerwiris

udir-moodle/qtype_shortanswerwiris

This is a usable but relatively young package with healthy release hygiene, a stable non-prerelease version, an active non-archived repository, documented tests and changelog, a declared GPL license, and a small runtime dependency set. The main concerns are limited maturity after only 78 days and four releases, just one commit from one contributor in the last three months, no security policy or scanning tools, and a workflow with top-level write permissions. Organization ownership and the complete package/repository structure provide some mitigation, but the maintenance and workflow risks justify caution before adopting it as a critical dependency.

Latest 2026090200

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 78 days old with four releases and a median release interval of about 34 days, so its maintenance history is still limited despite regular publishing.

Repo bus factor

All recent commits come from one contributor, creating a concentrated maintenance dependency. Organization ownership provides some handoff potential, but no second active contributor is shown.

Repo commit activity

Only one commit was recorded in the last three months from one active maintainer, indicating limited recent maintenance activity even though the repository is not archived.

Repo tooling

Composer is used as a build tool, but no security scanning tools are detected, leaving a security-hygiene gap in the repository.

Security policy

No repository security policy is present, reducing transparency about vulnerability reporting and response expectations.