giak/shibboleth-bundle

It has a usable README, a declared MIT license, no install scripts, and a repository that matches the package. Its single release, no recent commits, absent security tooling, and minimal adoption leave little evidence of ongoing support.

Latest v1.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has had only one release, published about 6 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a Symfony integration package.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, while its last push was about 6 years ago. This materially increases abandonment risk.

Maintainers

Only one registry account has publishing access, providing limited observable publishing capacity. The repository's actual activity is more important here and is also inactive.

Project backing

The source repository is owned by an individual account rather than an organization, and the registry namespace differs from that owner. The matching repository and package mention provide some compensating evidence, but no broader project backing is shown.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with an inactive project, though the absence of backlog alone is not severe.