Unfit to use for new projects: the release notes and README explicitly say this SDK is deprecated and no longer maintained, recommending migration to DocuSign’s IAM SDK. No releases or commits were recorded in the last 12 months, despite the repository remaining available.
20%
Total Score
25
50
The README and this version’s release notes explicitly state that the SDK is deprecated and no longer maintained, and recommend the IAM SDK instead. Its tests, changelog, and README provide useful transparency but do not offset the project’s stated end of maintenance.
The package has six releases overall, but none in the last 12 months; its latest release was on June 16, 2025. This supports the explicit deprecation notice and indicates that new fixes or API updates should not be expected.
The repository recorded zero commits and zero active maintainers during the last three months. That inactivity is consistent with the package being retired and creates substantial abandonment risk.
The package is backed by the DocuSign organization, which provides credible ownership context. Organizational backing does not compensate for the explicit retirement and lack of recent activity.
The repository is not archived and was pushed on June 16, 2025, which shows it remains accessible. However, this is only a limited compensating signal because the package documentation explicitly says it is no longer maintained.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
firebase/php-jwt Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.