simplesamlphp/simplesamlphp-module-cdc

Name lookalikedanger

The package resembles simplesamlphp/saml2, and borrows_lookalike_identity is true. Although artifact_overlap is 0.0 and the repository matches the package, the identity signal is strong enough to create a severe adoption risk.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Recent releases and a push in the wider project do not compensate for the absence of current development activity in this package.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations and response ownership unclear. Its Dependabot and composer-audit tooling provide some compensating security practice but do not replace a policy.

Workflow auditcaution

All 24 analyzed action references are unpinned, which weakens build reproducibility and provenance. The audit found no dangerous triggers, untrusted checkouts, script injection, or other fired findings, so this is a hygiene concern rather than a standalone severe risk.