pakpak/jwt-auth

Release historydanger

The latest release was published on July 28, 2020, and there have been no releases in the last 12 months. This long release gap materially raises abandonment risk despite an initially regular release interval.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity for over six years. This is strong evidence of an unmaintained dependency.

Licensecaution

The package declares MIT and includes a license file, so it is not missing licensing. However, the artifact license file was detected as Apache-2.0, creating a material declaration mismatch that should be resolved.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a modest transparency gap, while the build tooling itself is appropriate.

Repository archivedcaution

The repository is not archived, which is a positive signal, but its last push was on October 18, 2020. The unarchived status does not compensate for the prolonged inactivity.