simplesamlphp/xml-ws-trust
The repository contains tests, active build tooling, and recent commits, while the organization provides continuity beyond the single recent contributor. Workflow permissions, unpinned actions, and the lack of a security policy leave meaningful maintenance and release-hygiene concerns.
70%
Total Score
67
100
100
67
Health Score Breakdown
One contributor made all five commits in the last three months, creating a concentrated maintenance dependency. Organization ownership provides some handoff capacity, but no second active contributor is shown.
Five commits were made in the last three months, indicating recent activity, but all activity came from one active maintainer.
The repository has no security policy, leaving no documented path for reporting vulnerabilities or explaining security response expectations.
All three workflows were analyzed successfully, but all 23 action references are unpinned, one workflow grants top-level write access, and high-confidence secrets-inherit findings appear twice. No untrusted checkout or script-injection sinks were found, limiting the severity of these workflow concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tim van Dijen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 simplesamlphp/assert Version ~3.0 | — | — |
simplesamlphp/xml-common Version ~3.0 | — | — |
simplesamlphp/xml-security Version ~3.0 | — | — |
simplesamlphp/xml-wss-core Version ~2.0 | — | — |
simplesamlphp/xml-ws-policy Version ~2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 8 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.