jasig/phpcas

Registry deprecationcaution

Packagist marks the package abandoned and names apereo/phpcas as its replacement. The linked repository remains active and this release is recent, so this is a caution rather than an unfit verdict.

Repo bus factorcaution

All recent commits came from one contributor, creating a narrow short-term maintenance base. Organization ownership provides some handoff capacity, so this is caution rather than danger.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing limited recent maintenance activity. The recent release partly offsets this, but the cadence remains thin.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less transparent. Existing security scanning provides partial compensation but does not replace a policy.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted checkouts, but all four action references are unpinned. That is a supply-chain hygiene gap, not a severe risk on its own.