simplesamlphp/saml2-legacy

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This is concerning for ongoing maintenance, although the recent push and release history partly compensate.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a security-sensitive SAML library.

Workflow auditcaution

All 4 workflows were analyzed without detected dangerous sinks or audit findings, but all 27 action references are unpinned and one workflow grants top-level write access, creating a workflow hygiene concern without an untrusted trigger.