Light SAML Symfony bridge bundle
55%
Total Score
caution
Usable with caveats: maintenance has stopped and the linked repository does not clearly identify this package.
The latest release was on January 9, 2024, with no releases in the last 12 months, indicating a prolonged maintenance gap for a Symfony integration package.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, providing no evidence of ongoing source maintenance.
The repository name does not match the package name and its README does not mention the package, so the package-to-repository relationship is not clearly established.
The repository has no security policy, which reduces transparency for vulnerability reporting, though this is less significant than the observed maintenance gap.
The workflow audit completed without findings, triggers, untrusted checkouts, or script injections. Both analyzed actions are unpinned, a minor reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^5.4 || ^6.0 || ^7.0 | — | — |
javer/lightsaml Version ^1.7 | — | — |
symfony/framework-bundle Version ^5.4 || ^6.0 || ^7.0 | — | — |
symfony/dependency-injection Version ^5.4 || ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.