simplesamlphp/simplesamlphp-module-consentsimpleadmin

Name lookalikedanger

The package is flagged as borrowing the identity of the much more established simplesamlphp/assert package, with 59 versus 227,951 monthly downloads; despite no artifact overlap, this is a serious consumer-confusion risk.

Release historycaution

The package is about 10 years old but has only five releases, with a median interval of about two years. One release in the past year and the latest release provide some evidence of continued maintenance, but the cadence remains sparse.

Repo commit activitycaution

There were no commits and no active maintainers during the past three months. The recent July push and March release partly offset this, but the short-term activity is still thin.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

All three workflows were analyzed with no reported audit findings or unsafe-trigger sinks. However, all 24 action references are unpinned and one workflow grants top-level write access, creating avoidable reproducibility and token-scope concerns.