The package is easy to inspect, with a small codebase, tests, and a clear license. Its limited adoption and absent security process leave little evidence of support if issues emerge.
42%
Total Score
100
67
50
The package has had no release in nearly six years, with only three releases overall and none in the last 12 months. This is strong evidence of stalled maintenance, despite a previously regular early cadence.
The repository has 1 star, 0 forks, and 1 watcher, providing little community evidence to compensate for the long maintenance gap.
The repository is not archived, but it was last pushed over five years ago. That prevents a critical assessment while still indicating a substantial abandonment risk.
No security policy is present. For a JWT library, this reduces transparency around vulnerability reporting and handling.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.