Now that OpenSAML 2 has been released, we would like to officially clarify the status of the 1.x branch. Officially, only the latest formal releases of the Java and C++ versions of OpenSAML 1.x are supported in any way. This corresponds to OpenSAML-J 1.1b and OpenSAML-C 1.1.1.
There is NO support of any kind, including security fixes, for any previous releases. (This has been true all along, but this formally clarifies our position.)
With respect to the supported versions, "support" constitutes a promise to address security-related bugs by applying patches to the subversion branch. It may include additional formal releases to incorporate these fixes, but this is NOT guaranteed.
Other bug fixes and enhancements are likely to be restricted to issues that impact our ability to continue to support the 1.3.x branch of the Shibboleth code base. Other issues are likely to be ignored.
Finally, our willingness to support this library branch at all is tied to our support of the Shibboleth 1.3.x code base. If at any time, we schedule an EOL date for either the Shibboleth IdP or SP releases on the 1.3 branch, the same EOL date will apply to the legacy OpenSAML branch. We will send a notification to the OpenSAML mailing list at that time.