he426100/hyperf-jwt

Release historydanger

The latest release was about 2 years 9 months ago, with no releases in the last 12 months. This is a substantial maintenance concern for a package used in authentication.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months, reinforcing the evidence of stalled maintenance rather than an isolated release gap.

Security policycaution

The repository has no security policy. For a JWT authentication component, this reduces transparency around reporting and handling security issues.

Workflow auditcaution

The only workflow was fully analyzed, but both action references are unpinned and one uses an archived action. No untrusted checkout, script injection, or broad top-level write permission was found, limiting this to a hygiene concern.