mahfuzrh/jwt-no-auth-token
The repository includes tests, a changelog, security policy, and static analysis, while the MIT license and modest dependency set are clear. Workflow images are unpinned, adding avoidable build-integrity risk.
38%
Total Score
25
81
100
Health Score Breakdown
This is the package's only release, published about five years and ten months ago, with no releases in the last 12 months. That strongly indicates abandonment risk.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and lack of ongoing maintenance.
One registry maintainer is a thin publishing base for a user-owned project, although this is supporting evidence rather than proof of abandonment.
The repository has 1 star, 0 forks, and 1 watcher, providing little community evidence to compensate for the lack of recent maintenance.
All 8 analyzed action references are unpinned, and a high-confidence, high-severity finding reports an unpinned container image. The audit found no untrusted checkouts or script injection, which limits the concern to build reproducibility and workflow hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mahfuz Ur Rahman |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 lcobucci/jwt Version ^3.3 | — | — |
illuminate/contracts Version ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.