simplesamlphp/simplesamlphp-module-negotiateext

Name lookalikedanger

The package borrows the identity of the much more established simplesamlphp/assert and is not described as a fork; despite zero artifact overlap, consumers may have intended the lookalike package.

Licensecaution

The artifact contains a license file and the repository also has one, but the declared LGPL-3.0-or-later does not match the detected LGPL-2.1 text; that inconsistency reduces licensing transparency.

Release historycaution

The package has 13 releases over about five and a half years but only one release in the last 12 months, indicating a slow cadence. The latest release is recent, so this is a maintenance concern rather than abandonment evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which weakens evidence of ongoing maintenance; its recent push and release history provide only partial compensation.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. Dependabot, composer-audit, and the clean workflow audit provide some compensating security hygiene.