maksimovic/jose-php

Release historycaution

There have been 4 releases over roughly 3 years, including 2 in the last 12 months, but the median interval is about 424 days, indicating a slow release cadence.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months, a concrete sign that maintenance may have paused.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which weakens the documented process for reporting and handling vulnerabilities in a cryptographic package.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 5 of its action references are unpinned, reducing build reproducibility and supply-chain hygiene.