thinkphp jwt auth composer
44%
Total Score
25
100
81
50
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring over three years ago. This is the strongest abandonment concern in the assessment.
A single registry publishing maintainer is a limited publishing base. Because the repository is owned by an individual rather than an organization, this gives little evidence of broader maintenance capacity.
There has been only one release, published over three years ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance for an authentication package.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no community signal to offset the maintenance concerns.
Composer build tooling is present, but no security scanning tools were detected. For an authentication package, that is a meaningful maintenance and review gap, though it is not evidence of maliciousness.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lcobucci/jwt Version ^4.3 | — | — |
topthink/framework Version ^6.0.0 || ^8.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.