simplesamlphp/simplesamlphp-module-authcrypt

Release historycaution

The package has existed for about 7 years with 13 releases and one release in the last 12 months. The roughly 170-day median interval indicates a deliberate but slow cadence rather than abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This is a meaningful maintenance warning, although the recent release and recent push provide some counterevidence.

Security policycaution

The repository has no published security policy. This reduces vulnerability-reporting transparency, though automated security scanning partly compensates.

Workflow auditcaution

All 24 analyzed action references are unpinned, and the audit found two high-confidence medium-severity secrets-inherit findings; one workflow also has top-level write permissions. No untrusted checkout or script-injection path was found.