netcommons/auth-shibboleth

Release historydanger

The package has had no releases in more than five years, with only four releases overall and a median interval of about 438 days. This is strong evidence of an unmaintained dependency despite its long history.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing no release in more than five years. This materially raises abandonment risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and no open work remains visible. Combined with zero recent commits, this indicates an inactive project rather than an actively maintained quiet period.

Repo package mentioncaution

The repository name does not exactly match the package name and its README does not mention the package, so the linkage is less transparent. The repository file tree nevertheless contains the AuthShibboleth implementation and tests, which partly supports the association.

Repo toolingcaution

Composer is used for the build, providing expected package tooling, but no security scanning tools were detected. The absence of scanning is a modest hygiene concern rather than evidence that the release is unsafe.