There has been no new release of OpenSCAP 1.2.x for years, and the upstream activity in that branch is almost non-existent. Conversely, OpenSCAP 1.3 is stable, its latest version being 1.3.3. Moreover, it received patches that improve the Debian support in February 2020.
The OpenSCAP 1.3 should be somehow packaged, otherwise the upstream maydiverge from Debian to a degree that it will be painful to pull it back when
1.2 becomes obsolete.
