rozmarbeka/saml2

Release historydanger

The package has 42 releases but none in the last 12 months; its latest release was in November 2016, nearly 10 years ago. This strongly indicates abandonment risk despite its earlier release history.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap and providing no evidence of current maintenance.

Package scaffoldingcaution

The artifact includes a 4,037-character README and tests, while the missing changelog is normal packaging practice and the repository has tests. The documentation explicitly warns that the API may change and some functionality does not work outside SimpleSAMLphp, limiting consumer confidence.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counters provide no community-maintenance signal alongside the inactive commit history.

Repo toolingcaution

Composer and Phing build tooling are present, showing some project structure, but no security-scanning tools were detected. This is a minor hygiene gap that reinforces the broader transparency concerns.