gauss-allianz/shibboleth-authentication-bundle

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, which weakens evidence of continuing maintenance despite the recent release.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month. This is limited evidence of project interaction, although issue counts are partly unknown.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in an authentication-focused bundle.

Workflow auditcaution

The sole workflow has one unpinned action and two high-confidence template-injection findings. No untrusted checkout or dangerous trigger was detected, so this is workflow hygiene risk rather than a severe standalone dependency risk.