Why hasn't the shibboleth gem been updated yet? #3581

Hi all,

I noticed that the omniauth‑shibboleth gem hasn’t been updated since August 2017 (via RubyGems).

Is there a reason the community behind DMPRoadmap hasn’t replaced or upgraded this gem yet?

Is this something under investigation currently?

Could the fact that the gem is unmaintained pose a security risk for us?

Finally — even if it’s unmaintained — do we actually need to upgrade it, or is it still safe in our usage context?

Thanks in advance!

https://rubygems.org/gems/omniauth-shibboleth