Package Health

stellarbit/saml2

SAML2 PHP library from SimpleSAMLphp

Latest 3.4.4PackagistPackagist

43%

Total Score

unhealthy

Risky: no releases or repository activity since November 2022, leaving this security-sensitive library effectively unmaintained.

Health Score Breakdown

Release historydanger

Only one release exists, published in November 2022, with no releases in the last 12 months. This strongly increases abandonment risk for a library handling SAML authentication.

Maintainerscaution

The registry lists one maintainer with publishing access. The organization-owned repository provides some backing, but the narrow publishing base still limits release continuity if that maintainer becomes unavailable.

Repo issue activitycaution

There are no open issues or pull requests and no issue or pull-request activity in the last month. With the old last push and release history, this supports a picture of inactivity rather than active maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning coverage is a meaningful hygiene gap for security-sensitive protocol code.

Repository archivedcaution

The repository is not archived, which is reassuring, but it was last pushed in November 2022. The absence of a formal archive does not offset the long period without repository activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Andreas Åkre Solberg

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ~1.0
—
—
webmozart/assert
Version ^1.4
—
—
robrichards/xmlseclibs
Version ^3.0.4
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform