kura-lab/jose-php

Release historydanger

Only three releases exist, and the latest was published about nine years ago; no releases appeared in the last 12 months. This strongly raises abandonment risk despite the package having a stable release history.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with repository activity stopping about nine years ago. For a JWT library, this materially increases maintenance and abandonment risk.

Project backingcaution

The registry namespace and repository owner match, providing consistent ownership context. The owner is an individual account rather than an organization, so the small maintainer base offers limited backing.

Repo popularitycaution

The repository has no stars and one fork, providing little supporting evidence of adoption or external review. Popularity is only supporting evidence, so this is a minor concern rather than a decisive risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing security checks matter for a security-sensitive JWT library.