Package Health

arietimmerman/laravel-saml

It includes tests, a usable README, and no install-time scripts. The single maintainer, absent security policy, unpinned workflow actions, and MIT/Apache-2.0 mismatch add adoption risk.

Latest v0.5.6PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

64

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has had no release in more than three years, despite seven releases overall; this strongly raises abandonment risk for a security-sensitive integration library.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the multi-year release gap and indicating a substantial abandonment risk.

Licensecaution

The manifest declares MIT, while the artifact license file is detected as Apache-2.0. A license file exists, but the mismatch creates legal and provenance ambiguity.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and no open work is visible. This provides no evidence of ongoing community maintenance.

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected. For an identity and SAML library, that is a meaningful repository hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Arie Timmerman

Direct Dependencies

DependencyLast ReleaseScore
illuminate/auth
Version ^6.0|^7.0|^8.0|^9.0
illuminate/http
Version ^6.0|^7.0|^8.0|^9.0
symfony/workflow
Version ^6.0
illuminate/console
Version ^6.0|^7.0|^8.0|^9.0
illuminate/hashing
Version ^6.0|^7.0|^8.0|^9.0

Weekly Downloads

Info

Last Published
3 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform