codeforyou/jwt
The small artifact has a usable README and minimal dependency surface. Its long inactivity and lack of tests or security tooling make future fixes and safe adoption uncertain.
38%
Total Score
0
67
50
Health Score Breakdown
The package has had only one release, published about eight years ago, with no releases in the last 12 months. This is strong evidence of abandonment or an unmaintained release line.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the very old release history and leaving no evidence of ongoing maintenance.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no additional sign of community review or maintenance capacity.
Composer is used for the build, but the repository reports no security-scanning tools. For an authentication library, that is a meaningful transparency and maintenance gap.
The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in a package handling JWT encoding and decoding.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 gaoyang |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.