simplesamlphp/simplesamlphp-module-sqlauth

Repo bus factorcaution

All one recent commit came from a single contributor. Organization ownership provides some handoff capacity, but no second active contributor is evidenced in this period.

Repo commit activitycaution

Only one commit was recorded in the last three months, so recent implementation activity is limited. The recent registry releases provide some compensation, but this remains a modest maintenance concern.

Security policycaution

The repository has no documented security policy. This is a transparency gap for an authentication module, although automated dependency scanning provides partial compensation.

Workflow auditcaution

All 24 analyzed action references are unpinned, which weakens reproducibility and action supply-chain control. The audit found no untrusted checkout, script injection, or high-confidence workflow findings, so this is a hygiene caution rather than a severe risk.