lozhkindm/jwt-auth

The package has a valid MIT license, repository tests, and matching source documentation. Its release and repository activity stopped in February 2021, making this old authentication library a risky dependency despite the repository remaining available.

Latest 1.0.0-rc.5.1

Packagist

38%

Total Score

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 50 releases but none in the last 12 months, and its latest release was published in February 2021. This long period without maintenance is a substantial abandonment concern.

Repo tooling

Composer is used for the build, but no security scanning tools are reported. The missing scanning is a modest transparency gap, not evidence of an unsafe release on its own.

Repository archived

The linked repository is not archived, which preserves the possibility of future maintenance, but its last push was in February 2021 and does not offset the prolonged inactivity.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unclear for an authentication library. This adds a transparency concern alongside the inactivity.

Version stability

The assessed release is a prerelease while the registry reports a later stable version, 1.0.4. That makes this specific release less suitable than the package's stable line, although it does not by itself show abandonment.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Sean Tymon

Direct Dependencies

Dependency	Last Release	Score
namshi/jose Version ^7.0	—	—
lcobucci/jwt Version ^3.2	—	—
nesbot/carbon Version ^1.0\|^2.0	—	—
illuminate/auth Version ^5.1\|^6	—	—
illuminate/http Version ^5.1\|^6	—	—