mediadreams/md_saml

This is a healthy, actively maintained release with a strong maintenance record: 31 releases over roughly 4 years, 10 releases in the last 12 months, a recent release, and 58 commits from two active contributors in the last 3 months. The repository is not archived, the package is not deprecated, the artifact is well documented and licensed, and the repository contains tests, changelog material, and build tooling. The main reservations are the low popularity, a concentrated contributor base, absence of a security policy and automated security scanning, and an undelimited GitHub Actions token-permission configuration; these are meaningful hygiene gaps but do not outweigh the demonstrated release and commit activity.

Latest 5.1.3

Packagist

87%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a modest publishing continuity concern. However, repository activity shows two active contributors, so the observed maintenance base is stronger than the registry access list alone suggests.

Project backing

The repository is owned by an individual user rather than an organization, so there is no organization-level maintenance handoff evidence. This modestly increases dependence on the small observed contributor base.

Repo bus factor

Two contributors are active, but the leading contributor accounts for about 71% of recent commits. This is a concentration risk, though the second contributor's 17 commits provides meaningful compensation.

Repo popularity

The repository has 7 stars, 15 forks, and 4 watchers. This is limited adoption evidence, but popularity is supporting evidence only and does not outweigh the strong maintenance signals.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning coverage is a security-hygiene gap, not evidence of abandonment by itself.