Hello,
when installing djangosaml2, the test files (and vectors) are not required to the user and as best practice, they should not be present in a productive environment. This includes test vectors, which also triggers automated secret scanners.
From what I see, this project uses a setup.py but should already exclude the tests-package. However the tests at djangosaml2.tests are still included.