simplesamlphp/cas

Repo bus factorcaution

One contributor made all six commits in the last three months, giving the repository a concentrated bus factor. Organization ownership partly compensates because maintenance can be handed off, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded six commits in the last three months, showing recent maintenance, but all were made by one active maintainer.

Security policycaution

No repository security policy is present. This is a transparency gap, although automated dependency scanning provides partial security-process coverage.

Workflow auditcaution

All three workflows were analyzed without failures and no untrusted checkout or script-injection paths were found. However, all 23 action references are unpinned, and the audit found two high-confidence medium-severity secrets-inherit findings; one workflow also has top-level write permissions.