simplesamlphp/simplesamlphp-module-authx509

Release historycaution

The project is mature, with 24 releases over roughly seven years, but only one release in the last 12 months. The latest release is recent, which partly offsets the slower recent cadence.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. The recent registry release and June 2026 repository push provide some compensation, but current maintenance activity is still thin.

Security policycaution

No repository security policy was found. For an authentication module, the lack of a documented vulnerability-reporting process is a meaningful transparency gap.

Workflow auditcaution

All 24 analyzed action references are unpinned, and the audit found high-confidence secrets-inherit findings in php.yml. One workflow also grants top-level write access; these are workflow hygiene and credential-scope concerns, but no untrusted checkout or script-injection sink was found.