syastrebov/jwks-decoder

Release historycaution

This is a young package with only one release, published about 177 days ago, so there is little release history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which leaves ongoing maintenance uncertain despite the repository being active enough to be fetched.

Security policycaution

No security policy is published, reducing transparency for reporting vulnerabilities in a package that handles JWKS and authentication-related data.

Workflow auditcaution

The single workflow gives every job a top-level write-capable token and both referenced actions are unpinned. No untrusted trigger, checkout, script injection, or auditor finding was reported, limiting this to workflow hygiene risk.