benbjurstrom/cognito-jwt-guard

Release historydanger

The package has had only 2 releases, both in February 2020, with no release in roughly 6 years and 7 months. This is strong abandonment evidence, although the repository was pushed more recently.

Maintainerscaution

Only one registry maintainer is listed, so publishing continuity depends on a single person. The repository owner matches that maintainer, which supports attribution but does not provide a broader contributor base.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with a project that is no longer actively maintained. Its more recent historical push prevents this from being conclusive on its own.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This matters for an authentication guard, even though it does not by itself show abandonment.