@boxyhq/saml-jackson

Dependency profilecaution

The package has 24 runtime dependencies across databases, cloud SDKs, and authentication components, creating meaningful maintenance surface area, but this is consistent with its broad integration role.

Release historycaution

The package has existed for about 4 years and has 667 releases, but only 3 releases in the last 12 months indicates a slower registry cadence. Active repository commits partly compensate for that concern.

Repo issue activitycaution

The repository has recent issue and pull request activity, although no pull requests were merged in the last month, leaving a modest process concern.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @boxyhq/saml-jackson, creating a concrete concern that the package may be associated with the wrong source project.

Workflow auditcaution

The single analyzed workflow has all 31 action references unpinned, uses top-level write permissions, and includes high-confidence ad hoc package installations; the audit also flags trusted publishing. Low-confidence cache findings are hygiene concerns rather than decisive evidence.