overtrue/laravel-saml
The release is well documented and tested, with recent fixes and validation across supported PHP versions. A single active maintainer, unpinned workflow actions, and no security policy leave maintenance and build transparency weaker than ideal.
78%
Total Score
75
100
100
50
Health Score Breakdown
post-install-cmd and post-update-cmd scripts add install-time behavior that developers should account for, creating a modest supply-chain and reproducibility concern.
All four recent commits came from one contributor, so maintenance depends heavily on a single person and has limited handoff resilience.
The repository has no security policy, which makes vulnerability reporting and response expectations less transparent for a security-sensitive SAML library.
The workflow was fully analyzed, uses read-only permissions, and has no dangerous audit findings, but all four action references are unpinned, leaving update integrity weaker than ideal.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 overtrue |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/framework Version ^13.0 | — | — |
onelogin/php-saml Version ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.