Package Health

jwk-to-pem

Convert a JSON Web Key to a PEM

Latest 2.0.7NPMNPM

70%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Health Score Breakdown

Release historycaution

The package has 22 releases over more than 11 years, but no registry release in the last 12 months; the linked repository was still pushed recently, partly compensating for the slow release cadence.

Repo bus factorcaution

One contributor made all two recent commits, leaving maintenance activity concentrated in a single person; organization backing provides some capacity to hand work off.

Repo commit activitycaution

Only two commits were recorded in the last three months, so maintenance activity is present but light.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations less transparent for a security-sensitive library.

Type declarationscaution

No type declarations are included, which reduces convenience for TypeScript consumers of this JavaScript library, but it is a consumer-ergonomics gap rather than evidence of abandonment.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
asn1.js
Version ^5.3.0
—
—
elliptic
Version ^6.6.1
—
—
safe-buffer
Version ^5.0.1
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
11 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform