bmorais/jwt

Release historydanger

The package has five releases, but its latest release was in June 2022 and it has had no releases in the last 12 months. This indicates substantial abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since June 2022.

Package scaffoldingcaution

The package includes a README, but it is only 13 characters long and provides little consumer documentation. The absence of tests and a changelog in the artifact is normal packaging practice and is not a concern by itself.

Repo package mentioncaution

The linked repository name does not match the package name, and its README does not mention the package. That weakens confidence that the repository is the package's maintained home.

Security policycaution

The repository has no security policy, which is a meaningful transparency gap for a package handling JWT tokens. No provided signal compensates for that missing disclosure process.