roadiz/jwt
Usable with caveats: it has frequent stable releases, clear licensing, tests, and organization backing. However, the repository shows no commits or active maintainers in the last three months and has no security policy or scanning, so verify that maintenance remains active before adopting it.
72%
Total Score
83
100
94
90
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern. This conflicts with the 60 releases in the last year, so it lowers confidence in current development activity rather than proving abandonment.
Composer is used for the build, but no security scanning tools are configured. The missing scanning is a transparency and assurance gap, although it is not by itself evidence that the package is unsafe.
No repository security policy was found. For a JWT-related library, the absence of a documented vulnerability-reporting process is a genuine transparency gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ambroise Maupate |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 lcobucci/jwt Version ^5.3 | — | — |
symfony/http-client Version 7.4.* | — | — |
Weekly Downloads
Info
- Last Published
- 13 days ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.