simplesamlphp/xml-ws-metadata-exchange

Repo bus factorcaution

All two recent commits came from one contributor. Organization backing reduces the risk compared with an unaffiliated solo project, but no second active contributor is shown.

Repo commit activitycaution

There were two commits in the last three months, including activity within the recent repository window, but this is a relatively light maintenance pace.

Security policycaution

The repository has no SECURITY.md or equivalent security policy, leaving vulnerability reporting guidance unclear.

Token permissionscaution

Two workflows lack top-level permissions declarations, and one workflow grants top-level write access. Although no dangerous workflow pattern was detected, narrower explicit permissions would improve repository governance.