neoan3-apps/jwt

Maintainerscaution

Only one registry maintainer is listed, leaving limited publishing redundancy. The linked repository is an individual-owned project, so there is no shown organizational backing to offset that concentration.

Release historycaution

The package has only 3 releases over about 6 years, with a median interval of about 805 days and no release in the last 12 months. The latest release is over 2 years old, which raises maintenance and abandonment concerns.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and providing little evidence of ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. That weakens supply-chain transparency for a package handling authentication tokens.

Security policycaution

The repository has no security policy, so users have no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it does not by itself make the release unfit.