cirrusidentity/simplesamlphp-module-authoauth2

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, indicating a current maintenance lull. The recent release and March push provide some compensation but do not remove the concern.

Repo issue activitycaution

No issues or pull requests were opened or closed in the last month, with 11 issues still open. This is consistent with limited recent project activity, though one open pull request shows some ongoing participation.

Security policycaution

No repository security policy was found. For an authentication module, the absence of a documented vulnerability-reporting path is a genuine transparency gap.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but all 15 action references are unpinned and the workflow grants top-level write permissions. These are maintainability and supply-chain hygiene weaknesses, not severe risks on their own.