pac4j-jwt
72%
Total Score
100
80
100
100
Health Score Breakdown
No declared license and no license file were found in the artifact, leaving the terms for use unclear. This is a genuine legal and transparency gap rather than a cosmetic omission.
The artifact contains no README, tests, or changelog, and no repository-side compensation was collected. For a compact Maven library this is not by itself evidence of abandonment, but it limits maintainability and release-context transparency.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10300 pac4j-jwt is vulnerable to Improper Verification of Cryptographic Signature in versions 0.0.1 - 4.5.8, 5.0.0 - 5.7.8 and 6.0.0 - 6.3.2. | 0.0.1 - 4.5.85.0.0 - 5.7.86.0.0 - 6.3.2 | Critical |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 org.pac4j:pac4j-core Version * | — | — |
com.nimbusds:nimbus-jose-jwt Version * | — | — |
org.bouncycastle:bcprov-jdk18on Version * | — | — |
com.fasterxml.jackson.core:jackson-databind Version * | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.