mitoop/jwt-auth

Release historycaution

The package has only three releases, all clustered within about two weeks, and none in the last three years. This is strong evidence of stalled maintenance for a library dependency.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, consistent with no registry releases since 2023. This materially raises the risk that defects and compatibility changes will go unaddressed.

Repo popularitycaution

The repository has one star, no forks, and one watcher. Popularity is supporting evidence rather than a verdict, but these very low adoption indicators provide little evidence of a broad maintenance community.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a transparency and hygiene gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a modest transparency concern for an authentication library.