pantheon-systems/wp-saml-auth

Licensecaution

The package declares GPL-2.0-or-later and includes license files, but artifact detection identifies MIT text without a repository license file. The mismatch should be clarified before adoption.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear despite its other security tooling.

Workflow auditcaution

All workflows were analyzed and all 30 action references are pinned, with no untrusted checkout or script-injection findings. However, six workflows grant top-level write permissions and a high-confidence bot-conditions finding remains in the Dependabot workflow.