pmaglione/saml-sp-bundle

Release historydanger

The latest release was published in November 2014, and there have been no releases in over 11 years. This is strong evidence of abandonment for a security-sensitive authentication bundle.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and offering no evidence of ongoing maintenance.

Lifecycle scriptscaution

The package runs post-install and post-update scripts. These add installation complexity and supply-chain exposure, though the signal does not show that the scripts are malicious or unusually dangerous.

Repo issue activitycaution

There were no new issues, closed issues, pull requests, or merged pull requests in the last month. This does not prove abandonment alone, but it provides no compensating maintenance activity.

Repo package mentioncaution

The repository name does not exactly match the package name and its README does not mention the package, creating some uncertainty about repository alignment. The source tree and README still describe the same SAML bundle, which partly reduces this concern.