Package Health

motian/jwt-auth

It includes a useful README, tests, and an explicit MIT license. The absence of a security policy or scanning provides little assurance for an authentication library.

Latest v3.1.5PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has 18 releases since April 2020, but none in the last 12 months and its latest release was in September 2021. This long period without releases is a substantial abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's prolonged lack of releases and indicating no visible current maintenance.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible community activity reinforces the maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest assurance gap alongside the lack of recent maintenance.

Repository archivedcaution

The linked repository is not archived, which avoids the strongest abandonment signal, but its last push was in September 2021 and does not offset the lack of recent activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Li Yuzhao
Wence Xie

Direct Dependencies

DependencyLast ReleaseScore
hyperf/cache
Version ~2.0.0 || ~2.1.0 || ~2.2.0
hyperf/utils
Version ~2.0.0 || ~2.1.0 || ~2.2.0
lcobucci/jwt
Version ^3.2
nesbot/carbon
Version ^1.0 || ^2.0
hyperf/command
Version ~2.0.0 || ~2.1.0 || ~2.2.0

Weekly Downloads

Info

Last Published
5 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform