It is clearly licensed and includes a README, changelog, and repository tests, with no install-time scripts. Its minimal dependency set is a small positive, but it cannot offset the adoption risk.
12%
Total Score
0
33
100
The package borrows the identity of the much more established simplesamlphp/saml2 package, which has about 267,279 monthly downloads versus 44 for this package. Consumers most likely wanted the lookalike package, making this a serious name-confusion risk.
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption and maintenance warning for a dependency.
The latest release was published about nine years ago, with no releases in the last 12 months. That long release gap strongly indicates abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, corroborating the absence of current maintenance.
The linked repository is archived and was last pushed about six years ago, so it is no longer maintained through normal project development.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.