TypeScript definitions for jsonwebtoken
84%
Total Score
100
100
90
100
50
No build attestation or trusted-publisher provenance is present. This is a transparency limitation, but the repository's active organization-backed workflow provides compensating project evidence.
The package has existed since 2016 with 55 releases, but it had no releases in the last 12 months and its latest release was over a year before collection. Active repository work partly offsets the stale registry cadence.
The repository name does not match the package and its README does not mention @types/jsonwebtoken, which creates a provenance clarity gap. The package README does identify the relevant DefinitelyTyped types path, but that evidence is outside this signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@types/ms Version * | — | — |
@types/node Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.