jdr/jwt
MIT licensing, a matching repository, and a small Composer-based implementation improve transparency. The single release, no recent commits, and absent security tooling leave substantial abandonment and maintenance risk.
38%
Total Score
0
58
75
Health Score Breakdown
This package has made only one release, on March 8, 2017, with no releases in the last 12 months. That long period without a new release is strong evidence of abandonment risk.
The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no maintenance since 2017.
The repository has zero stars and forks and one watcher. Popularity is not decisive, but these counters provide no supporting evidence of an active user or contributor community.
Composer is used for the build, which is appropriate, but no security scanning tools are present. This leaves a meaningful transparency and maintenance gap for a dependency.
The repository has no security policy, making it unclear how vulnerability reports would be handled if the inactive project received one.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Johan de Ruijter |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 lcobucci/jwt Version ^3.0.4 | — | — |
jdr/jws-ecdsa Version ^0.4 | — | — |
nesbot/carbon Version ^1 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.