alsbury/cognito-jwt-guard
The package includes tests, a clear README, matching MIT licensing, and no install-time scripts. Its maintenance has stopped, security policy coverage is absent, and the workflow uses an unpinned action, so pinning this exact version deserves care.
58%
Total Score
0
75
50
Health Score Breakdown
The package has only two releases, both published in May 2022, with no releases in the last 12 months. This is meaningful evidence of a stagnant release line for an authentication library.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in May 2022. No provided signal shows renewed maintenance.
The repository has no security policy. For a package handling authentication tokens, this reduces transparency and makes vulnerability reporting less clear.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but its one action use is unpinned. The missing top-level permissions block is acceptable on its own and does not offset the pinning hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ben Bjurstrom |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/auth Version ^5.1|^6 | — | — |
illuminate/http Version ^5.1|^6 | — | — |
firebase/php-jwt Version ^5.0 | — | — |
guzzlehttp/guzzle Version ^6.2.1 | — | — |
illuminate/support Version ^5.1|^6 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.