devmatheusguerra/jwt

Release historydanger

The package has only one release, published in September 2022, with no releases in the subsequent four years. That is strong evidence of abandonment risk, although the repository is not archived.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No newer activity is provided to offset this concern.

Maintainerscaution

One registry maintainer is a thin support base for a dependency, increasing continuity risk. The linked repository is user-owned, so this is not organization-backed maintenance.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, offering little supporting evidence of broad review or community involvement. Popularity is only supporting evidence, so this reinforces rather than determines the score.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For an authentication library, that limits evidence of ongoing security hygiene.