tvdijen/simplesamlphp-module-ldapradius

Project backingcaution

The registry namespace and repository are owned by the same individual account, so the package has clear ownership but no demonstrated organizational backing to compensate for a thin maintainer base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of ongoing maintenance, even though the repository was pushed more recently than that window.

Repo issue activitycaution

There is only one open issue, no open pull requests, and no issue or pull-request activity in the last month. This is limited evidence of current community activity but not a severe concern by itself.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a module involved in authentication.

Workflow auditcaution

All three workflows were analyzed with no high-confidence audit findings or unsafe-trigger sinks, but all 23 action references are unpinned and one workflow grants top-level write access. The unpinned references create avoidable workflow supply-chain risk; the broad permission is only a mild concern without an untrusted trigger.