javer/lightsaml

Release historydanger

The latest release was about 21 months before collection, with no releases in the preceding 12 months. That is a meaningful maintenance concern for a library dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the evidence of currently inactive maintenance.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a security-sensitive SAML library.

Workflow auditcaution

The single workflow was fully analyzed and has no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of its action references are unpinned, leaving avoidable build-reproducibility risk.