chumoe/jwt

Release historydanger

The package has had no releases in more than four years: its latest release was April 21, 2022, despite being 1,631 days old. This is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing that development has stopped for years.

Licensecaution

The manifest declares MIT, while the artifact license file is recognised as Apache-2.0. The release is licensed, but the disagreement creates a material clarity concern.

Repo popularitycaution

The repository has one star, no forks, and no watchers. This is weak supporting evidence for project maturity, but popularity alone is not decisive.

Repo toolingcaution

The repository uses Composer, but no security-scanning tools were detected. That leaves an avoidable transparency and maintenance gap for a JWT library.