Package Health/udir-moodle/qtype_truefalsewiris

udir-moodle/qtype_truefalsewiris

This is a usable, transparently packaged Moodle plugin with a declared GPL license, stable release versioning, tests, a changelog, a matching and non-archived organization-owned repository, and no install-time lifecycle scripts or dangerous workflow patterns. However, the package is young at 78 days with only four releases, and repository activity over the last three months consists of just one commit from one contributor; organization backing provides some handoff capacity but does not eliminate the thin observed maintenance base. The repository also lacks security scanning and a security policy, while its update workflow grants top-level write permissions. These are meaningful supply-chain and continuity concerns, so adoption is reasonable with monitoring but not yet low-risk.

Latest 2026090200

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 78 days old with four releases and a median release interval of about 34 days; this shows ongoing publication but provides limited long-term maintenance evidence.

Repo bus factor

All recent commits come from one contributor with a 100% share. Organization ownership provides some ability to hand maintenance off, but no second active contributor is evidenced, so continuity remains a concern.

Repo commit activity

Only one commit was recorded in the last three months, from one active maintainer, which is thin observed maintenance activity for a package being newly released.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. For a young, small plugin this is not inherently abandonment, but it offers little independent evidence of active maintenance.

Repo popularity

The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity is not decisive and the package has a matching organization-owned repository.