simplesamlphp/saml2-module-spid

Repo bus factorcaution

One contributor made 100% of the recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown, so the current bus factor remains a concern.

Repo commit activitycaution

Seven commits occurred in the last three months, but all activity came from only one active maintainer, leaving maintenance capacity dependent on a single person.

Security policycaution

No repository security policy is present, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

All 23 analyzed action references are unpinned, and the audit found two high-confidence medium-severity secrets-inherit findings; one workflow also has top-level write permissions. No untrusted checkout or script-injection path was found, limiting the severity.