gogentooss/samlbase

Library for SAML2 Service Providers in PHP

Latest 1.6.3

Packagist

58%

Total Score

caution

Usable with caveats: no release in over three years, suggesting maintenance may have stalled.

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package has a long history with 35 releases, but its latest release was over three years ago and there were no releases in the last 12 months. This raises a meaningful maintenance concern despite the earlier regular cadence.

Vulnerabilities

Title	Versions	Severity
CVE-2018-5387 gogentooss/samlbase is vulnerable to Improper Verification of Cryptographic Signature in versions 0.0.0 - 1.2.7.	0.0.0 - 1.2.7	High

Package versions

Maintainers

Ron van der Molen

Direct Dependencies

Dependency	Last Release	Score
twig/twig Version ^3.4	—	—
guzzlehttp/guzzle Version ^7.5	—	—
robrichards/xmlseclibs Version ~3.1.0	—	—
symfony/dependency-injection Version ^5.4	—	—