nextphp/jwt

The package is clearly licensed, has a usable README, and is backed by an organization with a simple dependency profile. There is no security policy or automated security scanning, leaving little independent assurance.

Latest 1.0.2

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases arrived on one day, and there have been no releases in over two years. This gives little evidence of ongoing maintenance for a security-sensitive library.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and elevated abandonment risk.

Maintainers

Only one registry maintainer is listed. The organization-owned project provides some backing, but the observed publishing base remains thin.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher. Popularity is not required for a healthy package, but these numbers provide no supporting evidence of broad use or community oversight.

Repo tooling

Composer is used for the build, but no security-scanning tools are present. That leaves fewer visible safeguards around a package handling authentication tokens.