Package Health/dbellettini/shibboleth-bundle

dbellettini/shibboleth-bundle

The package has tests, a README, and a declared MIT license, but its source repository has no recent maintenance or security policy. The repository also does not clearly identify the package, increasing uncertainty about ownership and support.

Latest v0.1.2

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The last release was in March 2014, with no releases in the past 12 months and only three releases overall. This is strong evidence of abandonment for a package intended to integrate with a changing framework ecosystem.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, and its last push was in August 2014. This indicates prolonged abandonment rather than merely a temporarily quiet project.

Package scaffolding

The artifact includes a README and tests, and the repository also has tests, which provide useful consumer and maintenance context. The README explicitly describes the bundle as early development and not ready for use, while the missing changelog is normal packaging practice and not material here.

Repo package mention

The repository name does not match the package name and its README does not mention the package. Although a subpackage can legitimately use a differently named repository, these values leave the package-to-source relationship unclear.

Repo tooling

The repository uses Composer, showing basic build tooling, but it has no security scanning tools. This is a modest transparency and maintenance gap, especially for an unmaintained authentication integration.