quantumca/jwt-auth

Release historycaution

The package has 50 releases but none in the last 12 months; its latest registry release was about 3 years and 8 months ago, which indicates substantial maintenance slowdown.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the old latest release and raising abandonment risk.

Repo popularitycaution

The repository has 0 stars, 1 fork, and 0 watchers. Popularity is supporting evidence rather than a verdict, but these counts provide little external evidence of adoption.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for an authentication package.

Workflow auditcaution

All 4 analyzed workflow action references are unpinned, weakening reproducibility. The reported cache-poisoning finding has low confidence, so it is hygiene concern rather than a severe risk.