littler/think-jwt

Release historydanger

The package has had no release in more than four years: all four releases arrived around April 2022, with none in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no evidence of ongoing maintenance.

Repo package mentioncaution

The repository name does not match the package name, and its README does not mention the package. That weakens confidence that the linked repository is specifically maintained for this package.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than decisive, but these figures provide little evidence of a durable user or contributor base.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing scanning reduces assurance for a package handling authentication tokens.