krak/mw-jwt-auth

The package is a tiny, focused codebase with tests, an MIT declaration, and no install-time scripts. Its long period without releases or repository activity leaves maintenance and compatibility risk for a new dependency.

Latest v0.1.2

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in July 2016, and there have been no releases in the last 12 months. This long abandonment window is a major maintenance risk despite the package having three historical releases.

Repo commit activity

The repository has had zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. No provided activity signal compensates for that absence.

Package scaffolding

The package includes tests and the repository also has tests, which supports basic project maturity. It has no README or changelog, leaving consumer guidance and change history limited, though the tests are the more meaningful positive here.

Repo popularity

The repository has zero stars and forks and only one watcher, providing little supporting evidence of broad review or adoption. Popularity is secondary, but it does not compensate for the maintenance gap.

Repo tooling

Composer is used as the build tool, but no security-scanning tools are present. The missing scanning is a hygiene gap rather than evidence that the package is unfit by itself.