lukasmu/laravel-samlite

Release historydanger

The latest release was over three years ago, with no releases in the last 12 months and only three releases overall. This is substantial evidence of slowed maintenance for an authentication library.

Lifecycle scriptscaution

The package runs a post-create-project-cmd lifecycle script. Install-time execution deserves extra review because it can affect a consuming project, although this signal alone does not establish harmful behavior.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release in over three years.

Security policycaution

The linked repository has no security policy. For a package handling SAML authentication, this reduces transparency around vulnerability reporting and response.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings, but all three action references are unpinned. That leaves avoidable build-supply-chain exposure, while the lack of a top-level permissions block is acceptable on its own.