simplesamlphp/xml-ws-policy

Repo bus factorcaution

One contributor holds 100% of recent commits. Organization ownership provides some handoff capacity, but no second recent contributor is shown to share the maintenance load.

Repo commit activitycaution

The repository had 8 commits in the last 3 months, but all were made by one active maintainer, making continuity dependent on a single contributor.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 23 analyzed action references are unpinned, and a high-confidence medium-severity secrets-inherit finding appears in php.yml; one workflow also grants top-level write permissions. The audit found no untrusted checkout or script injection, which limits the severity.