lgrevelink/php-simple-jwt

Release historydanger

The package has had no registry release for nearly four years, which raises maintenance risk even though it has a history of eight releases.

Repo commit activitydanger

There were no commits and no active maintainers in the measured three-month window, weakening the repository's recent maintenance evidence despite the newer push timestamp.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap for a JWT library.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in authentication-related code.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or injection findings, but both of its two action references are unpinned, leaving avoidable workflow supply-chain exposure.