Package Health Score

24 / 100

security
Security issues found
popularity
Limited
maintenance
Inactive
community
Sustainable

Explore Similar Packages

Security

Security issues found

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

Version				Vulnerabilities	License Risk
1.4.1	\|	05/2017		0 C 1 H 0 M 0 L	0 H 0 M 0 L
1.3.6	\|	04/2017		0 C 1 H 0 M 0 L	0 H 0 M 0 L
1.2.9	\|	01/2017		0 C 1 H 0 M 0 L	0 H 0 M 0 L
1.2.3	\|	02/2016	Popular	0 C 1 H 0 M 0 L	0 H 0 M 0 L
1.1.5	\|	10/2015		0 C 1 H 0 M 0 L	0 H 0 M 0 L

License

MIT

Security Policy

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Limited

Weekly Downloads (164)

GitHub Stars: 613
Forks: 217
Contributors: -

Direct Usage Popularity

The npm package express-saml2 receives a total of 164 downloads a week. As such, we scored express-saml2 popularity level to be Limited.

Based on project statistics from the GitHub repository for the npm package express-saml2, we found that it has been starred 613 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Sustainable

Readme.md: Yes
Contributing.md: No
Code of Conduct: No
Contributors: 0
Funding: Yes

This project has seen only 10 or less contributors.

We found a way for you to contribute to the project! Looks like express-saml2 is missing a Code of Conduct.

Embed Package Health Score Badge

Maintenance

Inactive

deprecated

Commit Frequency

Open Issues: 70
Open PR: 18
Last Release: 8 years ago
Last Commit: 3 months ago

Further analysis of the maintenance status of express-saml2 based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for express-saml2 is that it hasn't seen any new versions released to npm in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: not defined

Age: 9 years
Dependencies: 10 Direct
Versions: 27
Install Size: 0 B
Dist-tags: 1
# of Files: 0
Maintainers: 1
TS Typings: No

express-saml2 has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Readme

express-saml2 ·

High-level API for Single Sign On (SAML 2.0)

Description

This module provides high-level API for scalable Single Sign On (SSO) implementation. Developers can easily configure the Service Providers and Identity Providers by importing the corresponding metadata. SAML2.0 provides a standard guide but leaves a lot of options, so we provide a simple interface that's highly configurable.

Installation

To install the stable version

$ npm install express-saml2

Integrations

OneLogin

Get Started

var saml = require('express-saml2');

See full documentation here

Support algorithms

Signature algorithms

Data encryption algorithms

Key encryption algorithms

Demo

In the /examples folder, there are three entities (1 IdP and 2 SPs). They are at port 3001, 4002 and 4003.

Without using Single Sign On, users have to remember several pairs of username/password in order to log into different internal applications.

SAML proposes two ways to initiate Single Sign On, they are respectively Service Provider Initiated SSO and Identity Provider Initiated SSO. In SP-initated SSO, the user attempts to access SP but their federated identity is authenticated by IdP, so they first have to log on IdP, then IdP sends back a SAML assertion response to SP, and finally SP creates a session to user in order to access the resources.

In the approach of IdP-initated SSO, IdP provides links which refers to the resources in service providers. In this use case, users don't need to visit SP first.

IdP-initiated Single Logout is also provided and relied on relay state. IdP provides a link refers to the single logout endpoints in one of those participated service providers (SP1). The selected SP sends back a logout response to IdP with relay state which is the logout endpoint URL of next participated service provider (SP2), user finally log out IdP when all participated SP is logged out.

Talks

An introduction to Single Sign On

License

MIT

Copyright

express-saml2 dependencies

deflate-js lodash node-forge node-rsa uuid xml xml-crypto xml-encryption xmldom xpath

express-saml2 development dependencies

mocha should

FAQs

What is express-saml2?

High-level API for Single Sign On (SAML 2.0). Visit Snyk Advisor to see a full health score report for express-saml2, including popularity, security, maintenance & community analysis.

Is express-saml2 popular?

The npm package express-saml2 receives a total of 164 weekly downloads. As such, express-saml2 popularity was classified as limited. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is express-saml2 well maintained?

We found indications that express-saml2 is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is express-saml2 safe to use?

Security issues were found while scanning the latest version of express-saml2, and a total of 1 vulnerabilities were detected. It is highly advised to conduct a security review before using this package. View the full security scan results.

Last updated on 12 December-2024, at 07:40 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

Package Health Score

Explore Similar Packages

Security and license risk for significant versions

Is your project affected by vulnerabilities?

Weekly Downloads (164)

Direct Usage Popularity

Embed Package Health Score Badge

Commit Frequency

Keep your project healthy

Check your package.json

Snyk Vulnerability Scanner

Readme

express-saml2 ·

Description

Installation

Integrations

Get Started

Support algorithms

Demo

Talks

License

Copyright

express-saml2 dependencies

express-saml2 development dependencies

FAQs

What is express-saml2?

Is express-saml2 popular?

Is express-saml2 well maintained?

Is express-saml2 safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues