Custom JWT logic
68%
Total Score
caution
Usable with caveats: no recent commit activity and all workflow actions are unpinned.
The package has existed for about 7 years and released version 12.0.0 recently, but only one release occurred in the last 12 months, indicating a limited recent release cadence.
There were no commits and no active maintainers in the last 3 months. Although a recent release shows some activity, the lack of ongoing repository work weakens maintenance confidence.
The repository has zero stars and forks and only two watchers, indicating limited public adoption. Popularity is supporting evidence rather than a health verdict, so this is a modest concern.
Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful security-maintenance gap for a JWT library.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
firebase/php-jwt Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.