jimtools/jwt-auth

Maintainerscaution

One registry account has publish access, which is a limited publishing base; however, the repository is user-owned and the release and repository activity provide supporting evidence of active ownership.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months, a meaningful maintenance pause. The recent release history and a repository push on March 17, 2026 partly offset abandonment concerns.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear for an authentication middleware package.

Token permissionscaution

Neither workflow declares top-level token permissions, and only one has job-level permissions; although no write permissions are shown, the workflow permission model is not consistently explicit.