simplesamlphp/xml-soap

Repo bus factorcaution

All 13 recent commits came from one contributor, so maintenance knowledge is concentrated and a contributor departure could disrupt the project.

Security policycaution

The repository has no published security policy, which leaves reporting and response expectations less transparent for a library handling XML and SOAP data.

Workflow auditcaution

All three workflows were analyzed, but all 23 action references are unpinned and a high-confidence secrets-inherit finding appears twice; one workflow also has top-level write permissions. These are workflow hygiene and credential-scope concerns, though no untrusted checkout or script injection was found.