psecio/jwt

The package includes a clear README, extensive tests, and a small dependency surface. Its long-standing inactivity and lack of a security policy make version 1.7 a poor long-term dependency.

Latest 1.7

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in May 2015, with no releases in the last 12 months. That more than 11-year gap is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long release gap and materially increasing abandonment risk.

Repo issue activity

There are 9 open issues, with no new or closed issues and no pull-request activity in the last month. This suggests unresolved maintenance demand rather than active stewardship.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance weakness for a security-sensitive JWT library.

Repository archived

The linked repository is not archived, but its last push was in November 2015, so the non-archived status does not compensate for the prolonged inactivity.