Concerns about multiple pending PRs and lack of active reviews

[gsaandy]

Hi @crewjam and community,

First of all, thank you for your work on crewjam/saml. This library is a key part of many production systems, and the community really appreciates the effort that has gone into building and maintaining it.

I’ve noticed that a number of PRs (including #621 and several others) have been open for quite some time without review or merging. I completely understand that maintaining an open-source project is often a volunteer effort and that time and resources can be limited.

That said, the lack of review activity is making it harder for contributors to get improvements and fixes integrated, and some of these changes appear to be important for functionality and security.

I wanted to open this issue to:

1. Start a discussion about the current state of PR reviews and project activity.
2. Explore ways the community can help, whether that’s by:
   • Adding additional maintainers or reviewers
   • Setting up a clearer PR review process or schedule
   • Prioritizing certain PRs (e.g., bug fixes, security updates)
3. Offer assistance I (and I’m sure others) would be happy to help with reviewing, testing, or triaging PRs if that would be useful.

The goal here isn’t to complain, but to find a constructive way forward so the project can continue to thrive. If there’s already a plan for PR review or maintainership changes, it would be great to share it with the community.

Thanks again for all your work and for considering this request 🙏