Package Health/simplesamlphp/simplesamlphp-module-infocard

simplesamlphp/simplesamlphp-module-infocard

A SimpleSAMLphp module that works with Information Cards techcnologies.

Latest v1.0.2

Packagist

12%

Total Score

critical

Unfit to use: the package is deprecated, archived, and has had no releases or active contributors for years.

Are you affected? Scan for Free

Health Score Breakdown

Name lookalike

The package is flagged as borrowing the identity of the much more established simplesamlphp/saml2 package, with 58 monthly downloads versus 280,257 and only three stable releases versus 180. Although the repository matches this package and its README mentions it, the identity signal remains a supply-chain caution for consumers searching for the lookalike.

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against starting a new dependency on this release.

Release history

The package has only three releases, with the latest in June 2017 and none in the last 12 months. This long release gap is consistent with an inactive project.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. Combined with its archived status, this provides no evidence of ongoing maintenance.

Repository archived

The linked repository is archived, indicating the project is no longer maintained through its source repository. That materially increases abandonment and compatibility risk.

Vulnerabilities

Title	Versions	Severity
CVE-2010-10004 simplesamlphp/simplesamlphp-module-infocard is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.0.	0.0.0 - 1.0	Medium
CVE-2017-12874 simplesamlphp/simplesamlphp-module-infocard is vulnerable to Improper Input Validation in versions 0.0.0 - 1.0.1.	0.0.0 - 1.0.1	High