simplesamlphp/simplesamlphp-assets-base

Repo bus factorcaution

All recent commits came from one contributor, leaving maintenance dependent on a single active individual; organization ownership provides some handoff capacity but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating limited recent source activity compared with the strong registry release cadence.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations less transparent for consumers.

Workflow auditcaution

The audit covered all three workflows with no untrusted checkouts, script injection, or auditor findings, but all nine action references are unpinned and one workflow grants top-level write access.