jdr/jws-ecdsa
MIT licensing, a matching repository, and no install-time scripts make the package straightforward to inspect and consume. Ongoing maintenance evidence is thin, with no security policy and very little repository activity.
42%
Total Score
0
70
75
Health Score Breakdown
The latest release was on December 9, 2017, with no releases in the last 12 months. That long release gap is a substantial abandonment concern, although the package is not registry-deprecated.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history showing no release since December 2017. The repository is not archived, but there is no recent maintenance evidence.
The package includes a README and changelog, which support transparency, but the README says it was created as compatibility support and will be deprecated once its upstream dependency adds support. The absence of tests in the published artifact is normal packaging practice.
The linked repository has no security policy. For a library handling ECDSA signing and verification, that leaves vulnerability-reporting and maintenance expectations less clear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Johan de Ruijter |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mdanter/ecc Version ^0.4|^0.5 | — | — |
lcobucci/jwt Version ^3.0.4 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.