@nestjs/jwt

Build provenancecaution

The release has no attestation or trusted-publisher provenance, leaving publication origin less independently verifiable than it could be.

Lifecycle scriptscaution

A prepare install-time script is present, adding a small amount of installation behavior to review, but this alone is not evidence of poor package health.

Repo toolingcaution

TypeScript, Vitest, and npm build tooling are present, but no security-scanning tooling was detected, leaving a modest assurance gap.

Security policycaution

The repository has no security policy, so it gives maintainers and users no documented vulnerability-reporting path.