friendsoftypo3/openid

Licensecaution

The manifest declares GPL-2.0-or-later, while the included license file is detected as Apache-2.0. This unresolved mismatch creates real legal and transparency risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although recent releases show publishing activity, the absent development activity raises maintenance risk.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The missing scanner is a modest transparency and maintenance gap, not a severe risk by itself.

Security policycaution

No repository security policy was found. For an authentication extension, this weakens the project's stated process for handling vulnerabilities.