openconext/saml-value-object

Release historycaution

The package has existed since 2015 and has eight releases, but no release appeared in the last 12 months and the median interval is about 253 days, indicating slow maintenance.

Repo commit activitycaution

No commits and no active maintainers were observed in the last three months, consistent with the slow release cadence and increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and security-process gap.

Security policycaution

The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned, weakening build reproducibility and update safety.