razesoldier/eims-jwt

Lifecycle scriptscaution

The package defines a post-autoload-dump install-time script. This is a mild supply-chain consideration, but the signal gives no evidence that the script is unsafe.

Release historycaution

The package has six releases since January 2022, but none in the last 12 months; its latest release was about 14 months ago. This indicates slowing maintenance, though the package is not extremely old or deprecated.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the lack of recent releases and increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That weakens maintenance transparency without making the package unfit on its own.

Security policycaution

The repository has no security policy. For a JWT service, this is a meaningful disclosure and maintenance gap, although it does not by itself show unsafe code.