sopheak/sp-jwt-auth
Clear documentation, tests, release notes, and security tooling improve day-to-day adoption. Pin 0.1.23 and test authentication changes before upgrading.
68%
Total Score
67
100
88
100
Health Score Breakdown
The repository is owned by an individual rather than an organization, so the highly concentrated contributor activity has no visible organizational handoff signal to offset it.
The package is only 97 days old but has 24 releases, with a median interval of about 20 minutes; this shows active iteration but also an unusually rapid cadence for a young package.
Two contributors are active, but one accounts for 91% of recent commits, leaving maintenance heavily dependent on a single person.
The latest registry version is a prerelease, the package is not at a stable major version, and 70% of recent releases are prereleases, so compatibility may still change substantially.
All three workflows use read-only permissions and the audit completed fully, but a release workflow checks out untrusted content under workflow_run and a security workflow uses an archived action; both are concrete workflow hygiene risks.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version ^2.0|^3.0 | — | — |
firebase/php-jwt Version ^7.0 | — | — |
laravel/framework Version ^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 hours ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.