eljam/guzzle-jwt-middleware

Repo commit activitycaution

The repository had no commits and no active maintainers in the last 3 months. This is a maintenance concern, although the current release and recent push show that activity has not vanished entirely.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scan is a modest transparency and hygiene gap, not evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a minor transparency gap for a middleware package handling authentication tokens.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only job permissions with no audited dangerous findings. However, both of its two action references are unpinned, leaving them exposed to upstream reference changes.