rediris-es/simplesamlphp-module-idpinstaller

Release historydanger

The latest release was in August 2019, with no releases in the last 12 months. This prolonged release gap is a substantial abandonment concern despite the package having a stable version history.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, with the last push in May 2020. This indicates several years without visible maintenance.

Licensecaution

The package declares Apache-2.0, but its COPYING file was detected as LGPL-2.1; both the artifact and repository contain license files. The license is present, but the mismatch requires legal clarification before adoption.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a moderate hygiene gap, though it does not by itself indicate the package is unsafe.

Security policycaution

The linked repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, particularly for an authentication-related module.