surfnet/stepup-middleware-client-bundle

Release historycaution

The project is mature, with 70 releases over roughly 11 years, but only one release in the last 12 months and a median interval of about 7 days indicate a recently slower cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release and long project history partly offset it.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a maintained API client, the missing automated security scanning is a modest safeguard gap.

Security policycaution

The repository has no security policy. This weakens transparency about vulnerability reporting and handling, though it does not by itself indicate abandonment.

Workflow auditcaution

Both workflows were analyzed successfully and had no detected dangerous sinks or audit findings. However, all three action references are unpinned, leaving them exposed to upstream action changes.