fusionauth/jwt-auth-webtoken-provider

Release historycaution

This is a 1.0.0 package with only one release, published about 3 years ago and with no releases in the last 12 months. That leaves limited evidence of release maturity and ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This weakens evidence of active maintenance, despite the recent repository push shown by repository_archived.

Repo popularitycaution

The repository has no stars and one fork, so external adoption evidence is limited. Popularity is supporting evidence rather than a health verdict, and organization backing partly offsets the small audience.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a hygiene gap rather than evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no detected dangerous triggers, untrusted checkouts, injection sinks, or audit findings. However, all six action references are unpinned, leaving avoidable build-integrity risk.