safire-ac-za/simplesamlphp-module-genuniqueid

Repo bus factorcaution

All 4 recent commits came from one contributor, giving the project a high maintenance concentration. Organization backing partly mitigates handoff risk but does not remove dependence on one active contributor.

Security policycaution

No security policy is published. This is a transparency gap for a package used in an authentication-related ecosystem, though it is not evidence of unsafe code by itself.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, and it has no top-level write permissions. However, all 13 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.